Privacy policy

Requires legal review before launch. This is a structural placeholder, not legal advice. Photographs of hair loss and any medical history you send are health data, which is a special category under Article 9 of the UK and EU GDPR. Processing it needs an identified lawful basis and explicit consent. The live site's existing policy should be reviewed by a qualified adviser and its substance carried over here.

What this policy must cover

Who the data controller is, with a named contact and a real address
What data is collected, including photographs and medical history
The lawful basis for processing, and explicit consent for health data
How long data is kept, and how it is deleted
Who it is shared with, including any clinic, hospital or referral partner
Transfers outside the UK and EEA, and the safeguards applied
Your rights: access, rectification, erasure, portability, objection
Cookies and analytics, and how consent is obtained
How to complain to a supervisory authority