Home / Privacy notice
Privacy notice
Last updated: 4 October 2026
This notice explains how Dr Farah Suker collects, uses and protects your personal information when you visit this website, contact the clinic or have treatment. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
The data controller is Dr Farah Suker, 10 Harley Street, London W1G 9PF. Email: info@drfarah.co.uk. Telephone: 0203 488 3948. Information Commissioner's Office registration number: [to be added before launch].
Dr Farah also acts as the clinic's data protection lead. You can contact her with any question about your information using the details above.
What information we collect
- Contact and booking details: your name, email, phone number, date of birth and appointment history.
- Health information: your medical history, medicines, allergies, examination findings, treatment records, product batch numbers and consent forms.
- Clinical photographs: taken only with your written consent, and used only for the purposes you agree to.
- Payment information: handled by our booking and payment providers. We do not store your full card number.
- Messages: anything you send us by email, phone or message.
- Website use: this website does not use analytics or advertising cookies. Our web host keeps basic technical logs (such as IP address and pages requested) for security.
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Booking and managing your appointments | Contract (UK GDPR Article 6(1)(b)) |
| Assessing you, providing treatment and keeping clinical records | Contract, and the provision of health care (Article 9(2)(h)) |
| Keeping records we are required to keep, and dealing with complaints or claims | Legal obligation (Article 6(1)(c)) and legitimate interests |
| Sending appointment reminders and aftercare information | Contract and legitimate interests |
| Sending news or offers by email | Your consent only. You can unsubscribe at any time. |
| Using a photograph of you in marketing | Your explicit, separate written consent, which you can withdraw at any time. |
Who we share it with
We never sell your information. We share it only when needed to care for you or run the clinic:
- Service providers who process information for us under contract: our booking and payment platform (Glowday), our email provider (IONOS) and our website host (Cloudflare).
- Your NHS GP, with your consent, or without it only where needed to keep you or someone else safe.
- Other professionals involved in your care, if you are referred.
- Regulators, insurers or legal advisers, where the law requires it or to deal with a complaint or claim.
Some providers may store information outside the UK. Where they do, they use legal safeguards approved under UK law.
How long we keep it
Clinical records are kept for at least 8 years after your last appointment, in line with professional guidance. Booking and email records are kept for as long as needed for the purposes above. Information is then securely deleted.
How we keep it safe
Records are kept in secure, password-protected systems with two-step sign-in. Clinical photographs are stored in your clinical record, not on personal devices. Only Dr Farah and authorised service providers can access your information.
Your rights
You have the right to:
- ask for a copy of the information we hold about you (we reply within one month, usually free of charge)
- ask us to correct anything that is wrong
- ask us to delete information, where we are not required to keep it
- object to, or ask us to limit, how we use your information
- withdraw consent at any time, where we rely on consent
- ask for your information to be transferred to another provider
To use any of these rights, email info@drfarah.co.uk. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Website and third-party sites
This website loads fonts from Google Fonts, which receives your IP address but does not set cookies. When you click "Book a consultation" you go to Glowday's website, which has its own privacy and cookie policies.
Changes to this notice
We'll update this notice if the way we use information changes. The date at the top shows when it was last updated.