Privacy Policy
 

Privacy and Security Notice

​

​

At Navarro Aesthetics, we value the privacy and security of your personal data. This notice outlines our commitment to protecting your personal information and explains how we handle, process, and secure the data collected through our website, in compliance with the General Data Protection Regulation (GDPR) for the United Kingdom.

1. Data Collection and Purpose

We collect and process personal data through our website for specific purposes outlined below:

a) Contact Information: When you voluntarily provide your contact details, such as your name, email address, and phone number, we will use this information to respond to your inquiries and provide requested information about our services.

b) Appointment Booking: If you choose to schedule an appointment through our website, we will collect necessary details to facilitate the booking process and manage your appointment effectively.

c) Marketing Communications: With your consent, we may use your contact information to send you relevant marketing communications regarding our services, promotions, and updates. You can opt out of these communications at any time.

d) Website Analytics: We collect anonymous data about your website usage, such as IP address, browser type, and referring pages. This information is used to analyze and improve our website's performance and user experience.

1. Lawful Basis for Data Processing

We process your personal data based on the following lawful bases:

a) Contractual Necessity: Processing your personal data is necessary to fulfill our contractual obligations when you request information or book an appointment through our website.

b) Consent: For marketing communications, we rely on your freely given consent, which can be withdrawn at any time.

c) Legitimate Interests: We may process your data for legitimate business interests, such as website analytics and improvements, as long as your fundamental rights and freedoms are not overridden.

1. Data Sharing and Transfers

We will not disclose your personal data to third parties without your explicit consent unless required by law or necessary for the provision of our services. However, we may engage trusted third-party service providers to assist us in data processing, including website hosting, analytics, and marketing. These processors are bound by strict confidentiality and security obligations.

Some of these service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions, are in place to protect your personal data during transfers.

1. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. We regularly review our data retention practices to ensure compliance with legal obligations.

1. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. We maintain strict security controls, including encryption, access controls, and regular security assessments, to safeguard your information.

1. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

a) Right to Access: You can request access to the personal data we hold about you.

b) Right to Rectification: If your personal data is inaccurate or incomplete, you can request its correction.

c) Right to Erasure: You have the right to request the deletion of your personal data, subject to legal obligations and legitimate interests.

d) Right to Restriction: You can request the restriction of processing your personal data in certain circumstances.

e) Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.

f) Right to Object: You have the right to object to the processing of your personal data in certain situations.

g) Right to Withdraw Consent: If you have provided your consent for data processing, you can withdraw it at any time.