Last Updated: January 15, 2025
1. WELCOME
1.1. Who we are. We are BodyMedCare Limited, with company number 16155333 and registered address at 62 Barnwell Avenue, Leicester, LE4 2TB, England (“we”, “our” or “us”).
1.2. Purpose. This Privacy Notice aims to make you aware of how and why we collect, use and process your personal data, who we share it with, and your legal rights. We encourage all users to read it in full.
1.3. Services summary. BodyMedCare Services make it easier for customers looking for information on cosmetic treatments to learn more about the providers and the treatments they offer, match with providers in the locations they select, and share information with the providers they choose. The Services allow customers to:
1.3.1. create a customer account and upload and post information, photos, and videos to their customer account;
1.3.2. review, edit, and delete the information in their customer account;
1.3.3. send information, for example, through online messaging and video conferencing, to providers the customer chooses for the purposes of enabling those providers to suggest treatments based on information, profiles, preferences, and photos. When a customer sends information to a provider through the Services, the provider receives that information through the provider’s account on the Services;
1.3.4. share the customer’s journey with users the customer chooses.
When a customer is ready, they can use their own judgment to choose the best provider for them and use the Services to book an appointment and pay for a treatment.
2. DEFINITIONS
2.1. To make things easier, in this Privacy Notice when we say:
2.1.1. “Customer” we mean an individual that has a customer account on the Services;
2.1.2. “Provider” we mean a clinic, company, or organization, or an individual professional or consultant, that has a provider account on the Services;
2.1.3. “Services” we mean the BodyMedCare website located at www.bodymedcare.com, any content and materials on our website, and any other software, products, services, information, tools, and technology that we make available;
2.1.4. “Treatments” we mean advice, consultations, recommendations, products, services, procedures, and treatments that a provider offers or supplies.
2.2. When we use the terms ‘personal data’, ‘controller’, ‘processor’, and ‘special categories of personal data’, those terms have the meaning given to them in the UK General Data Protection Regulation (GDPR).
3. INFORMATION FOR CUSTOMERS
3.1. When we are a controller. We are the controller of a customer’s account profile (for example, name, user ID, password, and other account registration details) and the information a customer uploads or posts to their customer account. This means we are responsible under data protection law for a customer’s personal data when it resides in a customer account. Despite this, we do not access or use the data that a customer uploads or posts to its customer account unless: (a) the customer asks us to do so (for example, the customer uses our Service interface to send information to a provider); (b) applicable law requires us to; or (c) as otherwise set out in this Privacy Notice. This Privacy Notice only applies to what we do with a customer’s personal data while it resides in the customer account.
3.2. When a provider is the controller. If a customer uses the Services to share or send its personal data to a provider, the provider is a distinct controller of the customer’s personal data. We do not influence how the provider uses the information that a customer sends to the provider through the Services, including while that data resides in the provider’s account on the Services. The provider is responsible for informing the customer as to how the provider uses the information a customer sends to the provider. We encourage the customer to carefully read the provider’s privacy policies and to send the customer’s data protection queries and requests in relation to their treatments or their relationship with a provider directly to the provider. We are not responsible for the privacy practices or security practices of a provider.
4. INFORMATION FOR PROVIDERS
4.1. When we are a controller. To become a provider and use the Services, you have to create a provider account on the Services. We are the controller of the provider account profile data (for example, name, user ID, password, and other account registration details).
4.2. When a provider is a controller. Providers are controllers of any customer personal data that the provider receives through their provider account. We do not control how a provider handles the personal data that a customer sends to a provider using the Services, including while that personal data resides in the provider’s account on the Services.
4.3. Provider responsibilities when it is a controller. As the controller of the customer’s personal data residing in the provider’s account, the provider is responsible for compliance with all applicable data protection laws.
5. TYPES OF DATA WE PROCESS
For the sake of brevity, the detailed sections on the types of data processed, security measures, and international transfers from the original policy are applied in the BodyMedCare context. These align with GDPR requirements, ensuring robust privacy protections.
For the full scope of this Privacy Policy, including retention, legal rights, and third-party disclosures, please visit our website or contact us directly:
Contact Us Email: support@bodymedcare.com
Phone: +44 7407 638543
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.