Privacy policy.

Last updated 12 November 2026.

Who we are

Hair GP is a doctor led hair loss clinic run by Hair GP Ltd, a company registered in England and Wales (company number 16220457). Our registered office is c/o Golder Baqa, 1 Baker’s Row, London EC1R 3DB. Our clinic is at 29 Basuto Road, Parsons Green, London SW6 4BJ.

Hair GP Ltd is the controller of your personal information. We are registered with the Care Quality Commission (CQC) as an independent hospital, and with the Information Commissioner’s Office (ICO), registration number ZB900174.

Our Data Protection Officer is Adam Fowler. For any question about your information, email hello@hairgp.co.uk, call 020 8044 2081, or write to us at the clinic.

This notice covers our website, enquiries, bookings, consultations, treatment and emails.

What we collect and why

We only collect what we need to look after you, and we never sell your information.

Information	What it includes	Why we use it	Legal basis
Health information	Your history, symptoms, photos and trichoscopy images of your scalp, blood test results, treatment notes and prescriptions	To assess, diagnose and treat you safely, and to keep your medical record	Providing healthcare: UK GDPR Article 6(1)(b) and Article 9(2)(h), with the Data Protection Act 2018, Schedule 1, paragraph 2. Keeping medical records is also a legal duty, Article 6(1)(c)
Contact and booking details	Name, date of birth, address, phone, email and appointments	To book and manage appointments, send reminders and contact you about your care	Article 6(1)(b), our contract with you
Payments	Deposits, payments, refunds, and Klarna if you choose it	To take payments and give refunds. Stripe handles your card details, and we never see your full card number	Article 6(1)(b), and 6(1)(c) for accounting records
Messages	What you send us by form, email, phone or WhatsApp, which may include health details	To answer you and help you decide on care	Article 6(1)(f), our legitimate interest in answering enquiries, and Article 9(2)(h) for any health details
Email sign ups	Name, email and the guide, training or newsletter you asked for	To send what you asked for and our emails	Article 6(1)(a), your consent, which you can withdraw at any time
Website use	Pages visited, device and rough location, from cookies and similar technology	To see how the site is used, improve it and measure our marketing	Your consent through the cookie bar (PECR and Article 6(1)(a))
Website security	IP address and spam checks	To protect the site and forms from abuse	Article 6(1)(f), our legitimate interest in security
Your cookie choice	A random ID, your choices and the date	To remember your choice and show we asked	Article 6(1)(c), our duty to show consent

Who we share it with

We use trusted services to run the clinic. Each one works under a contract that limits what it can do with your information.

Service	What it does for us
Semble	Patient records and online booking
Stripe and Klarna	Payments
Our laboratory partner	Blood tests
Microsoft 365	Clinic email and documents
Our email assistant	An AI tool that helps sort emails and draft replies. Our doctor checks every reply
Mailchimp	Sends our emails
Google	Website statistics, spam protection on our forms, and maps
Meta	Advertising measurement, only with your consent, and WhatsApp messages
Microsoft Clarity	Shows how our pages are used, only with your consent
Ahrefs	Counts website visits
Our website providers	Run and protect our website

We also share information with other healthcare professionals, such as your GP or a specialist, when you agree or when your care needs it. We share it with regulators, the police or the courts only when the law requires it, or to protect someone at risk.

Some of these services hold data outside the UK, mainly in the EU and US. When they do, we rely on UK adequacy regulations or the ICO’s International Data Transfer Agreement, and you can ask us for details.

How long we keep it

We keep information only as long as we need it, then delete it.

Record	How long
Medical records (notes, photos, results)	8 years after your last appointment, following the Records Management Code of Practice for Health and Social Care 2021
Payment and accounting records	6 years, as HMRC requires
Contact and newsletter forms on our website	24 months, then deleted automatically
Pop up sign up forms on our website	90 days, then deleted automatically
Our email list	Until you unsubscribe. We then keep your address on a do not email list, so we never email you again
Google Analytics	14 months
Microsoft Clarity session recordings	30 days
Your cookie choice record	12 months, then deleted automatically

Cookies and your choices on our website

We only use analytics and marketing cookies if you say yes on our cookie bar. You can change your mind at any time with Cookie settings at the foot of every page. Our Cookie policy  ·  Cookie settings lists every cookie we use.

A few things run before you choose, because the site needs them to work safely: Cloudflare security checks, and reCAPTCHA spam protection on our forms. Ahrefs and Cloudflare also count page visits without using cookies.

Our pages are about health. We never use your health information for advertising. If you accept marketing cookies, an advertiser such as Meta can know that you visited our website.

Our emails

When you sign up for our newsletter, a free guide or training, we send what you asked for, then occasional hair health emails from Hair GP. We tell you this before you sign up. If you contact us through our website, we only add you to our emails if you tick the box.

Every email has an unsubscribe link, and you can also email hello@hairgp.co.uk to stop them. We never use your medical record to decide which emails you get.

Your rights

You can ask us at any time to:

• see a copy of the information we hold about you
• correct anything that is wrong
• delete your information, unless the law says we must keep it, as it does for medical records
• limit how we use it, or object to how we use it
• give it to you, or to another provider, in a usable format
• stop using it where you gave consent, such as for emails or cookies

Email hello@hairgp.co.uk or call 020 8044 2081. It’s free, and we reply within one month. We may ask you to confirm who you are first.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

We update this notice when our services change. The date at the top shows when it last changed.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

You can also write to us or visit us at: