Privacy Policy
Last updated: 29 July 2026
This Privacy Policy explains how personal data of visitors to this website is collected and used, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who is responsible for your data
The data controller for this website is eve clinic. For any question about your privacy or to exercise your data protection rights, please contact dralucianealbertoadm@gmail.com.
2. What data we collect
The data we collect depends on how you interact with the website.
- Information you provide: your name, phone number and email address when you complete a contact form or message us, together with anything you choose to include in your initial message.
- Information collected automatically: your IP address, browser and device type, pages visited, time spent on the site, referral source, and cookie data as described in section 6.
Any health information relating to your care is a special category of personal data under Article 9 of the UK GDPR and is treated with additional care. Clinical records created during consultation are held as part of your medical record and are not processed through this website.
3. How we use your data
- To respond to your enquiry and arrange an appointment.
- To send you information about a booked appointment, such as confirmation and preparation instructions.
- To improve the experience and content of the website.
- To meet legal and regulatory obligations that apply to medical practice.
We do not use your data to send you marketing without your prior consent.
4. Lawful basis and who we share with
We process your data on the following lawful bases under the UK GDPR: your consent, where you provide details voluntarily (Article 6(1)(a)); the performance of a service you have requested (Article 6(1)(b)); our legitimate interests in the security and analysis of the website (Article 6(1)(f)); and compliance with legal obligations (Article 6(1)(c)). Where health data is processed, we rely on Article 9(2)(h), the provision of health care by a health professional.
We do not sell your data. We share it only with service providers that operate the website infrastructure, such as hosting and analytics or advertising tools (for example Google Analytics and Google Ads), under confidentiality obligations, and with public authorities where required by law.
5. How long we keep your data
Enquiry details that do not lead to an appointment are kept for up to 12 months after last contact. Records relating to patients who have been seen are retained in line with the NHS England Records Management Code of Practice: at least 8 years after the conclusion of treatment for adults, and for children until their 25th birthday. Website and cookie data are kept for the period set by each tool. After the applicable period, data is deleted or anonymised, unless the law requires us to keep it.
6. Cookies
This website uses cookies under the Privacy and Electronic Communications Regulations (PECR). Strictly necessary cookies are required for the site to work and cannot be switched off. Analytics and advertising cookies are only set with your consent, which you can give or withdraw at any time through the cookie settings on the site. You can also manage or block cookies in your browser settings; blocking strictly necessary cookies may affect how the site works.
7. Your rights
Under the UK GDPR you have the right to be informed about how your data is used, to access your data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, and to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any of these rights, please contact dralucianealbertoadm@gmail.com. Please note that medical records cannot be erased within their legal retention period.
8. Security and data breaches
We use appropriate technical and organisational measures to protect your data, including an encrypted connection, access controls and professional confidentiality. No system is completely secure. If a data breach is likely to result in a risk to your rights, we will notify you and the Information Commissioner's Office (ICO) as required by law.
9. Contact via messaging apps
If you contact us through a third-party messaging service such as WhatsApp, that service is subject to its own privacy policy. Please avoid sending detailed clinical information through messaging. Clinical matters are dealt with during consultation.
10. Complaints
If you have a concern about how your personal data is handled, please contact us first at dralucianealbertoadm@gmail.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.
11. Changes to this policy
We may update this policy to reflect changes in the law or in how the website operates. The date of the latest update is shown at the top of this page. For any privacy question, please contact dralucianealbertoadm@gmail.com.