Privacy policy

Last updated: 24 June 2026

Bloomfield Laser Clinic ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Bloomfield Laser Clinic is a private medical clinic regulated by the Regulation and Quality Improvement Authority (RQIA). We are the "data controller" for the information described in this policy.

• Address: The Lodge, 1 Donaghadee Road, Groomsport, BT19 6LG
• Telephone: 028 9127 5737 (weekdays 09:00–13:00)
• Email: office@bloomfieldlaser.co.uk

The information we collect

• When you contact us by phone or email to ask about or book an appointment: your name, contact details, and any information about your skin concern or health that you choose to share with us.
• When you visit this website: limited technical information needed to deliver and secure the site (such as your browser type and approximate region), and — if enabled — privacy‑friendly, cookieless website analytics. We do not use advertising or tracking cookies.

Health information

Information about your health is "special category" data under Article 9 of the UK GDPR. We only collect what you choose to share when enquiring, and what is necessary to provide your care. It is treated in strict confidence and accessed only by the clinicians and staff involved in your treatment.

How we use your information

• To respond to your enquiry and arrange your appointment.
• To provide, plan and follow up on your consultation, treatment and care.
• To meet our legal, regulatory and professional obligations (for example to RQIA, or to professional regulators such as the GMC and NMC).

Our lawful bases

We rely on the following lawful bases under the UK GDPR:

• Article 6(1)(b) – to take steps at your request before entering into a contract for treatment.
• Article 6(1)(f) – our legitimate interest in responding to your enquiries and running the clinic.
• Article 6(1)(c) – compliance with our legal obligations.
• Article 9(2)(h) – the provision of health care and treatment; and, where relevant, your explicit consent under Article 9(2)(a).

Cookies and similar technologies

This website does not set advertising or tracking cookies. Specifically:

• Map: the map on our Contact page only loads when you choose to click "View map". At that point Google may set cookies and process your data under Google's own privacy policy.
• Fonts: our typefaces are delivered by Google Fonts, which involves a request to Google's servers.
• Analytics: any website analytics we use is privacy‑friendly and does not rely on cookies or identify you personally.

Who we share your information with

We do not sell your personal information. We may share it with:

• The clinicians and staff involved in your care.
• Our website host and technology providers (for example Cloudflare, which hosts this site, and Google, as described above) acting on our behalf or under their own terms.
• Regulators, insurers or other organisations where we are required or permitted to do so by law.

How long we keep it

We keep your information only for as long as necessary. Enquiry correspondence is kept for a limited period; clinical records are retained in line with applicable healthcare record‑retention guidance.

Your rights

You have the right to access, correct, erase, restrict or object to our use of your personal information, to data portability, and to withdraw any consent you have given. To exercise any of these rights, please contact us using the details above.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Keeping your information secure

We use appropriate technical and organisational measures to protect your information. This website is served over a secure, encrypted (HTTPS) connection.

Changes to this policy

We may update this policy from time to time. Any changes will be published on this page with a revised "last updated" date.