Privacy notice – Face Facts Clinic


This Privacy Notice sets out details of the information that I, as a nurse practitioner responsible for  your treatment, may collect from you and how that information may be used. Please take your time to read this Privacy Notice carefully

About me

In this Privacy Notice I use “I” or “mine” or “my” to refer to me as the nurse practitioner who is using your personal information.

In the event that you have any queries, comments or concerns in respect of the manner in which I have used, or potentially will use, your personal information then you should contact me directly on and I would be happy to discuss further.

What personal data do I collect?

The personal data I collect depends on whether you just visit my website or use my services.

Log Data

Like most website owners, I collect information that your browser sends whenever you visit my website (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of my site that you visit, the time and date of your visit, the time spent on those pages and other statistics. In addition, I use third party services such as Google Analytics that collect, monitor and analyse this data in order to improve the content of my site and to make it more relevant and helpful to my visitors. If you wish to opt out of this for my site and others using Google Analytics you can do so here.


Like many sites, I use “cookies” to collect information. A cookie is a small file placed on your computer’s hard drive. It enables our website to identify your computer as you view different pages on our website. Cookies do not provide me with access to your computer or any information about you other than that which you have shared with me.

Cookies allow websites and applications to store your preferences in order to present content, options or functions that are specific to you. They also enable us to see information like how many people use the website and what pages they tend to visit. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Look for information such as “Delete and manage cookies”

Required data from you

If you use my services, personal data is required to fulfil the requirements of a contractual or service relationship, which may exist between you and my business. This may be collected via my website booking form or in person.

We collect your:

a) Name

b) Contact details, such as postal address, email address and telephone number (including mobile number)

c) Social network details

d) Financial information, such as credit card details used to pay me

e) Occupation

f) Emergency contact details, including next of kin

g) GP contact details

h) Background referral details

i) Date of Birth

I collect sensitive personal data and do so under the following legal basis:

Known allergies
9(2) (a) – Explicit consent of the data subject

Medical history
9(2) (a) – Explicit consent of the data subject
9(2) (h) – For purposes of medicine, health or social care or health professionals

Results of treatments
9(2) (a) – Explicit consent of the data subject

From 25 May 2018, the current Data Protection Act will be replaced by the EU General Data Protection Regulation (GDPR) and a new Data Protection Act. All uses of your information will comply with the GDPR and the new Data Protection Act from that date onwards.

I also have to adhere to the data protection regulations laid down by the Nursing & Midwifery Council.

How do I collect your information?

Information may be collected directly from you when:

a) You enter into a contract with me for the provision of treatments

b) You use those treatments

c) You complete enquiry forms on my website

d) You submit a query to me including by email or by social media

e) You correspond with me by letter, email, or social media.

How will I communicate with you?

I may communicate with you in a range of ways, including by telephone, SMS, email, and / or post.

If I contact you using the telephone number(s) which you have provided (landline and/or mobile), and you are not available which results in the call being directed to a voicemail and/or answering

service, I may leave a voice message on your voicemail and/or answering service as appropriate, and including only sufficient basic details to enable you to identify who the call is from, very limited detail as to the reason for the call and how to call me back.

However, to ensure that I provide you with timely updates and reminders in relation to your treatment I may communicate with you by SMS and/or unencrypted email (where you have
provided me with your SMS or email address).

What are the purposes for which your information is used?

I may ‘process’ your information for a number of different purposes (“processing” is essentially the language used by the law to mean using your data) each time I use your data I must have a specific legal justification to do so

Generally I will rely on the following legal justifications, or ‘grounds’:

  • Taking steps at your request so that you can enter into a contract with me to receive services from me
  • For the purposes of providing you with services pursuant to a contract between you and I
  • I have an appropriate business need to process your personal information and such business need does not cause harm to you. I will rely on this for activities such as quality assurance, maintaining my business records, monitoring outcomes and responding to any complaints.
  • You have provided your consent to my use of your personal information.

Note that failure to provide your information further to a contractual requirement with me may mean that I am unable to set you up as a patient or facilitate the provision of my services

As a business owner I need to carry out marketing but am mindful of your rights and expectations in that regard. As a result, I will only provide you with marketing which is relevant to my business and about products or services which may be of interest to you where you have provided your consent for me to do so.

I may also provide marketing information to you (including information about other products and services offered by selected third-party partners) in accordance with preferences you have

I may disclose your information to the third parties listed below for the purposes described in this Privacy Notice. This might include:

  • Other members of staff involved in the delivery of your treatment like receptionists or PA’s
  • My third party services providers such as pharmacies, GP’s, Medical Consultants, IT suppliers, accountants and my marketing consultant
  • Selected third parties in connection with any potential future sale, transfer or disposal of our business

If you no longer wish to receive marketing newsletters, you can click on the “unsubscribe” link that appears in all of them, otherwise you can always contact me using via – to update your contact preferences.

If you no longer wish to receive non-website based marketing information, please contact me.

How long do I keep personal information for?

I will only keep your personal information for as long as reasonably necessary to fulfil the relevant purposes set out in this Privacy Notice and in order to comply with my legal and regulatory obligations.

If you would like further information regarding the periods for which your personal information will be stored, please contact me using via

You are entitled to the following under data protection law

Under Article 15(1) of the GDPR I must usually confirm whether I have personal information about you. If I do hold personal information about you I usually need to explain to you:

i. The purposes for which I use your personal information
ii. The types of personal information I hold about you
iii. Who your personal information has been or will be shared with
iv. Where possible, the length of time I expect to hold your personal information. If that is not possible, the criteria I use to determine how long I hold your information for
v. If the personal data I hold about you was not provided by you, details of the source of the information
vi. Whether I make any decisions about you solely by computer and if so details of how those decision are made and the impact they may have on you
vii. Your right to ask me to amend or delete your personal information and I legally have 30 days to do this.
viii. Your right to ask me to restrict how your personal information is used or to object to my use of your personal information
ix. Your right to complain to the Information Commissioner’s Office

I may update this Privacy Notice from time to time to ensure that it remains accurate, and the most up-to-date version can always be found at

This Privacy Notice was last updated on June 5th 2018.

  • It’s definitely one of the best decisions I ever made in my life. Thank you Jenny!

  • Jenny is great. Friendly and easy to talk to. Professional and really keen to help. If she can’t help you she will try and find someone who can. Most of the treatments she has experience of so she shows empathy and understanding. Go and see her like I did!