Who we are
This notice covers www.theeyelidstudio.co.uk. The data controller is The Eyelid Studio Limited (company number 17487912). Our contact for anything relating to this notice is enquiries@theeyelidstudio.co.uk.
This notice is about the website and the enquiry process only. If you become a patient, separate consent and information documents cover your clinical records and any clinical photography — you'll be given these directly as part of your care. Once you become a patient, your clinical record is held in the host clinic's patient records system, and the host clinic is the data controller for that record.
What we collect
When you use our contact form, we collect the information you choose to give us: your name, phone number, email address, and the general area your enquiry is about (for example, heavy upper eyelids or an eyelid lump), which you choose from a list. Our website provider, Cloudflare, also sees your IP address when you use the form, as part of its security and spam checks. Because this tells us something about your health, UK data protection law treats it as a special, more sensitive category of information.
We also collect general information about how the site is used, without using cookies — see "Cookies and analytics" below.
Why we collect it, and our legal basis
We use your name, phone number and email address to respond to your enquiry and arrange a consultation if appropriate. This is necessary for us to take the steps you've asked for before entering into an agreement for our services.
Because the health information you might share with us is a special category of data, we only use it with your explicit consent — given when you tick the consent box on the enquiry form before submitting it.
Who we share it with
- Cloudflare, Inc. — hosts this website, receives your enquiry when you send the form, runs the spam check (Cloudflare Turnstile), and provides our visitor statistics, acting as a data processor on our instructions.
- Resend, Inc. — the email service that sends your enquiry on to our inbox, acting as a data processor on our instructions.
- Google LLC — our email is run on Google Workspace, so enquiries arrive in, and replies are sent from, our Google mailbox. Google acts as a data processor on our instructions. Our embedded map is also provided by Google.
- Leamington Road Dental Practice (operated by Lux Dental Limited) — our host clinic, where consultations and procedures take place. If you're booked in for a consultation, relevant details are shared with the practice's reception team to arrange this.
We don't sell or share your information with anyone else, and we don't use it for advertising.
Where your data is processed
Google's, Cloudflare's and Resend's services may process data outside the UK, including in the United States. Where this happens, they rely on legal safeguards such as Standard Contractual Clauses to protect your information.
How long we keep it
If you send us an enquiry and do not become a patient, we keep your enquiry details for 12 months from the date we receive the email, and then delete them.
If you do become a patient, your details are shared with the host clinic, Leamington Road Dental Practice, and are then held and managed under its governance and retention policies. We delete the enquiry email we hold within 6 months of passing your information on.
In some circumstances you can ask us to delete your data: see Your rights below for further information.
Your rights
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you, and get a copy of it
- Ask us to correct inaccurate data
- Ask us to delete your data, in some circumstances
- Object to or restrict how we use your data
- Withdraw consent at any time, where consent is our basis for using your data
To exercise any of these, contact us at enquiries@theeyelidstudio.co.uk. If you're unhappy with how we've handled your data, you also have the right to complain to the Information Commissioner's Office (ICO).
Cookies and analytics
This website doesn't set its own advertising or tracking cookies. To understand how the site is used, we use Cloudflare Web Analytics, which works without cookies and doesn't track you across other websites. It records general information such as which pages are visited, the type of browser or device used and the country a visit comes from, and we only see this as combined totals rather than information about individual visitors.
Embedded content from Google, such as our map, may set Google's own cookies. Our enquiry form's spam check (Cloudflare Turnstile) is designed to work without tracking you. If any of this changes, we'll update this notice and our cookie banner accordingly.
Children
Our services are not directed at children, and we don't knowingly collect information from anyone under 18 through this website.
Changes to this notice
We may update this notice from time to time. The date below shows when it was last changed.