Please read this privacy notice carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint.
When we use personal data we are regulated by the Information Commissioner under the Retained Regulation EU 2016/679 (“UK GDPR”), the UK Data Protection Act 2018 and the Privacy and Electronic Communications Regulation (together, “Data Protection Legislation”). We are responsible, as Controller of your personal data, for the processing we do, for the purposes of Data Protection Legislation.
Key terms
It would be helpful to start by explaining some key terms used in this notice:
| We, The Editor’s List, TEL, us, our | The Editor’s List Limited, a company with registration number 10970551 and whose registered office is 63 Bermondsey St, London SE1 3XF. |
| Personal data | Any information relating to an identified or identifiable natural person |
| Special category personal data | Genetic and biometric data and personal data concerning, amongst other things, health, sex life or sexual orientation |
Personal data we collect
When you visit our website or otherwise engage with us, we will collect, store and use some or all of the following types of personal data from you, depending on whether you are a visitor or a cosmetic practitioner :-
How personal data is collected
We collect personal information directly from you, via some or all of the following means: when you visit our website as explained above; by email communication or if an enquiry is made via the enquiry form on our website; over the telephone; in writing; in face to face meetings if selected.
How and why we use personal data
Under Data Protection Legislation, we can only use personal data if we have one or more legal basis for doing so. Our legal basis for collecting your personal data may be that you have given your consent (for example if subscribing for our newsletter or if submitting the Contact Olivia form online); or to perform a contract that we have with you when you agree our Ts and Cs. Alternatively, that it is in the legitimate interest of The Editor’s List (or other third party) that it be collected and processed, for example to enable us to put our clients in contact with the appropriate cosmetic surgeons, doctors, beauty therapists or other practitioners.
We collect all special category personal data on the condition that you have given us your explicit consent by providing such data in the course of consultation.
We use your personal information if you are a client or potential client, to deliver our services to you and to put you in touch with the very best and most appropriate cosmetic surgeons, doctors, beauty therapists or other practitioners according to your needs. If you are a practitioner, we use your personal data in order to facilitate the introduction to you of clients for your expertise.
Promotional communications
We will only send you news and information about our events, special offers, podcast episodes and other initiatives if you have given us consent to be on our mailing lists (for example, if you have signed up to receive our newsletter).
Every message we send you will give you the option to opt-out of receiving any further marketing communications from us.
Who we share personal data with
If you are a client or a prospective client, we only share your personal data with our recommended practitioners and then only with your consent. If you are a practitioner, we only share your personal data with those clients to whom we have recommended your services. Otherwise, we only share personal data with our retained external third party service providers including cloud computing solutions such as Xero, Microsoft 365, WordPress, the Royal Mail, our Accountants and sometimes HMRC.
We only allow our retained external third parties to handle personal data if we are satisfied they take all appropriate technical and organisational measures (including the prescribed safeguards for the international transfer of personal data where appropriate), to protect all personal data and only on our written instructions.
Where personal data is held and how it is kept safe
Where personal data is stored with any of the third party providers referred to above, we have ensured that such providers encrypt the personal data in transit and at rest and deploy multi-factor authentication and other state of the art security measures which are standard across the industry.
Some personal data may also be held on local spreadsheets, in which case access is controlled by the use of strong passwords and biometric measures. Data is encrypted at rest.
How long personal data will be kept
We will only retain your personal data for as long as is necessary for the purpose for which we collected it, including for the purposes of discharging our legal and regulatory obligations. In some cases this can be for up to 7 years.
When it is no longer necessary to retain personal data, we will delete it.
Rights
All data subjects have the following rights, which can be exercised free of charge:
| Access | The right to be provided with a copy of personal data held on a data subject |
| Rectification | The right to require us to correct any mistakes in a data subject’s personal data |
| To be forgotten | The right to require us to delete personal data—in certain situations |
| Restriction of processing | The right to require us to restrict processing of certain personal data—in certain circumstances, e.g. if the accuracy of the data is contested |
| Data portability | The right to receive the personal data provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations |
| To object | The right to object: —at any time to personal data being processed for direct marketing (including profiling); —in certain other situations to our continued processing of personal data, e.g. processing carried out for the purpose of our legitimate interests. |
| Not to be subject to automated individual decision-making | The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning a data subject |
| To withdraw consent | The right to withdraw consent as a legal basis for processing, at any time |
For further information on each of those rights, including the circumstances in which they apply, please contact us or see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under Data Protection Legislation.
To exercise any of those rights, please contact us —see below: ‘How to contact us’.
How to complain
We hope that we can resolve any query or concern raised about our use of personal data.
Data Protection Legislation also gives the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns or by telephone: 0303 123 1113.
Changes to this privacy policy
We may change this privacy policy from time to time, when we do we will inform data subjects by the most appropriate means.
How to contact us
We can be contacted by post or email. Our mailing address is at the top of this Privacy Notice.
Our email address is : [email protected]
For all data subject rights, please contact: [email protected]
Last updated: July 2023
Sign up for our newsletter
Help
Follow on Instagram
Site by Ranch
