Privacy & data protection

AGlow Clinic, Unit UG19, The Galleries Shopping Centre, Broadmead, Bristol BS1 3XA, is responsible for the information described on this page and is the contact point for any question about it. Email info@aglowclinic.co.uk or call 07586 609909.

• Contact details you give when you enquire, book or order: your name, email address and telephone number.
• The appointment itself: which treatment, the date and time, its reference and whether it is confirmed or cancelled.
• Order details where you buy something: what you ordered, what it cost, the delivery address and whether it has been sent.
• Payment records: the amount paid, whether and when it was refunded, and the reference numbers Stripe gives the payment. Your card details are entered on Stripe’s own page and never reach this website or the clinic.
• A scrambled copy of the private link in your confirmation email, so the link can be recognised when you use it. The link itself is not stored.
• Short-lived records of the email addresses and telephone numbers used to book, order, enquire or ask for a link, which stop the same details being used over and over. They are deleted after about a day.
• Ordinary technical information needed to serve the site, such as the IP address recorded in the hosting provider’s request logs.

This website does not store health information. The booking record has no field capable of holding medical history, medications, allergies or clinical notes — that is enforced by the database rather than by anybody remembering not to type it. Please do not put any of it into the booking form or the contact form; it belongs in your consultation.

To answer an enquiry, to make and manage an appointment, to take and send an order, to take payment and give refunds, to let you cancel online, to send you confirmations, reminders and refund notices, to keep the records the clinic is required to keep, and to keep the site working and secure.

No marketing email is sent from this website.

That is the whole list. There is no analytics, no advertising or marketing pixel, no chat widget and no social embed anywhere on this website.

This website sets no cookies. There is no banner to dismiss because there is nothing to consent to and nothing is tracked.

Three things are kept by your own browser and are never sent anywhere: your basket, so it survives a page reload; while you check out, the delivery details you typed and your order reference, kept in that browser tab only and cleared when it closes, so coming back from the payment page does not mean typing them again; and — for clinic staff only — a sign-in token for the admin. Clearing your browsing data removes them.

Two things are not this website’s own. The payment page belongs to Stripe, which uses its own cookies there for security and fraud prevention. The map on the contact page is loaded from Google and may set cookies of its own; the clinic’s address is printed beside it, so you do not need the map to find us.

Health information is special category data, and this website is built so that it cannot hold any.

Suitability is discussed with the practitioner at your consultation. Any record the clinic keeps of that is held in its own patient records, separately from this website, with access limited to authorised clinic staff.

The website’s server code runs in the United States, its database is in Ireland, and the email service is in France. Personal information handled in the European Economic Area is covered by the UK’s adequacy regulations for the EEA.

Vercel, Stripe and Google are based in the United States. Transfers to them rely on the UK extension to the EU–US Data Privacy Framework or on the safeguards in their data processing terms.

Enquiries are kept while they are being dealt with and for a reasonable time afterwards. Appointments, orders and their payment records are kept for as long as the clinic needs them for its records, its professional and financial obligations and any question that might later arise about them.

Some things clear themselves automatically. A time held while you check out is released if you do not pay: within fifteen minutes if you never reach the payment page, and otherwise when the payment page expires, about half an hour later. An order that is never paid for is cancelled and its stock returned straight away if you leave the payment page without paying, and otherwise within about an hour and a half. The private link in a confirmation email stops working a month after the appointment, or a month after an order’s online cancellation window closes.

You may ask for a copy of what is held about you, ask for it to be corrected or erased, object to or restrict how it is used, ask for it in a portable form, or withdraw consent where the clinic relies on it.

Email info@aglowclinic.co.uk or call 07586 609909. The clinic may need to confirm who you are before answering, and some rights do not apply to records it is obliged to keep.

Please raise anything with the clinic first — info@aglowclinic.co.uk or 07586 609909 — so it has the chance to put it right.

If you are not satisfied with the answer, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.