Privacy Policy

1.0 User Privacy and Data Protection

User privacy and data protection are human rights.

We have a duty of care to the people who share their data with us.

Data will only be collected and processed by us when absolutely necessary.

We promise not to spam you.

Your data is safe with us — we will not pass it on to anyone else or make it public.

2.0 Relevant Legislation

Along with our business and internal computer systems, this website is designed to comply with the following legislation with regards to data protection and user privacy:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018 (DPA 2018)

This site’s compliance with the above legislation means that this site is likely compliant with the data protection and user privacy legislation of many other countries and territories. If you are unsure whether this site is compliant with your own country’s specific legislation, please contact our Data Protection Officer (details in section 10.0).

3.0 Personal Information We Collect and Why

This website collects and uses personal information for the following reasons:

3.1 Site Visitation Tracking

Like most websites, this site uses Google Analytics (GA) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages, and to see their journey through the website.

Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address which could be used to personally identify you, but Google do not grant us access to this. We consider Google to be a third party data processor (see section 7.0).

GA makes use of cookies, details of which can be found on Google’s developer guides. Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website.

Lawful basis for processing: Legitimate interests.

3.2 Our Blog

Should you choose to add a comment to any post published on our blog, the name and email address you enter with your comment will be saved to this website’s database, along with your computer’s IP address and the time and date that you submitted the comment. This information is only used to identify you as a contributor to the comment section of the respective blog post and is not passed on to any third-party data processors. Only your name will be shown publicly, although if the supplied email address is linked to a Gravatar account, your Gravatar photo will also be displayed.

Your comment and its associated personal data will remain on this site until we see fit to either remove the comment or remove the blog post. Should you wish to have the comment and its associated personal data deleted, please email us using the email address that you commented with.

If you are under 13 years of age, you MUST obtain parental consent before posting a comment on our blog.

Please avoid entering personally identifiable information into the comment field of any blog post comments you submit on this website.

Lawful basis for processing: Consent.

3.3 Contact Forms and Email

Should you choose to contact us using the contact form on our Contact page or by emailing us directly, none of the data you supply will be stored by this website or passed to any of the third party data processors defined in section 7.0. Instead, the data will be collated into an email and sent to us over the Simple Mail Transfer Protocol (SMTP).

Our SMTP servers are protected by TLS (sometimes known as SSL), meaning that the email content is encrypted before being sent across the internet. However, not all mail servers are secured in such a way, and we would therefore suggest that you always consider email as an insecure medium and avoid including personal, confidential or otherwise sensitive information within an email.

Lawful basis for processing: Legitimate interests (to respond to your enquiry).

3.4 Email Newsletter

If you choose to join our email newsletter, the email address you submit to us will be forwarded to Mailchimp, who provide us with email marketing services. We consider Mailchimp to be a third-party data processor (see section 7.0). Your email address will not be stored within this website’s own database or in any of our internal computer systems.

Your email address will remain within Mailchimp’s database for as long as we continue to use Mailchimp’s services for email marketing, or until you specifically request removal from the list. You can do this by using the unsubscribe link in any email newsletter we send you, or by contacting us directly. When requesting removal by email, please use the email account that is subscribed to the mailing list.

If you are under 13 years of age, you MUST obtain parental consent before joining our email newsletter.

While your email address remains within Mailchimp’s database, you will receive periodic newsletter-style emails from us (approximately one per month).

Lawful basis for processing: Consent.

4.0 How We Store Your Personal Information

As detailed in section 3.2, if you submit a comment to a blog post on this website, some personal information will be stored within this website’s database. This is currently the only time personal data will be stored on this website.

We are committed to keeping your data secure and continue to work towards ever more secure methods of storage, including pseudonymisation where technically possible.

5.0 Data Retention

We will not retain your personal data for longer than is necessary for the purposes for which it was collected:

  • Blog comments: Retained until the comment or post is removed, or until you request deletion.
  • Email newsletter: Retained until you unsubscribe or request removal.
  • Contact form / email enquiries: Retained for up to two years from the date of correspondence, after which data is securely deleted.

6.0 About This Website’s Server

This website is hosted by Hostinger within a UK data centre located in London.

7.0 Our Third Party Data Processors

We use the following third parties to process personal data on our behalf. All third parties have been carefully selected and comply with UK GDPR and the Data Protection Act 2018. International data transfers are protected under Standard Contractual Clauses (SCCs) as approved by the UK Information Commissioner’s Office.

8.0 Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access — you have the right to request a copy of the personal data we hold about you.
  • Right to rectification — you have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
  • Right to erasure — you have the right to request that we delete your personal data in certain circumstances.
  • Right to restriction of processing — you have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to data portability — you have the right to receive your personal data in a structured, commonly used and machine-readable format.
  • Right to object — you have the right to object to the processing of your personal data in certain circumstances, including where processing is based on legitimate interests.
  • Rights in relation to automated decision-making — you have the right not to be subject to decisions made solely by automated processing where those decisions produce a legal or similarly significant effect.

To exercise any of these rights, please contact our Data Protection Officer (see section 11.0). We will respond to all requests within one calendar month.

If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9.0 Data Breaches

We will report any unlawful data breach of this website’s database or the database(s) of any of our third-party data processors to all relevant persons and authorities within 72 hours of the breach, if it is apparent that personal data stored in an identifiable manner has been affected.

10.0 Data Controller

The data controller of this website is:

Claire Gould Trichology 10 Admirals Walk Teignmouth Devon TQ14 9NG

Tel: 07983 262099 Email: hello@clairegouldtrichology.co.uk

11.0 Data Protection Officer

C. Gould Claire Gould Trichology 10 Admirals Walk Teignmouth Devon TQ14 9NG

Tel: 07983 262099 Email: hello@clairegouldtrichology.co.uk

12.0 Changes to Our Privacy Policy

This privacy policy may be updated from time to time in line with legislation or industry developments. We recommend checking this page periodically for any changes. Specific updates are noted in the change log below.

12.1 Change Log

Date Change
June 2026 Full policy review and update: legislation references updated to UK GDPR / DPA 2018; Privacy Shield references replaced with Standard Contractual Clauses; data subject rights section added; ICO complaint right added; data retention periods added; age thresholds updated to 13; contact details updated to reflect rebrand to Claire Gould Trichology.