Privacy Policy

Your practitioner (the clinic) is the data controller for your personal and health data. They decide what information to collect and are responsible for ensuring it is processed lawfully.

My Consent Forms acts as a data processor on behalf of your practitioner. We provide the digital consent platform, store data securely, and process it only as instructed by the practitioner.

This may include:

• Name, contact details, date of birth, and address
• Relevant medical history and treatment suitability answers
• Consent acknowledgements and digital signature
• Before and after photographs (where taken)
• Appointment details and treatment notes
• Technical data such as IP address and timestamp at the time of signing

Your information is used to:

• Assess your suitability for treatment
• Record your informed consent before treatment
• Support your treatment and aftercare
• Maintain accurate clinical records
• Communicate with you about your appointment and care

Your information is not used for marketing unless you give separate, explicit marketing consent.

Access to your records is restricted to your practitioner and authorised clinic staff. My Consent Forms uses secure authentication, access controls, and encrypted storage. Consent forms and client medical information are not publicly accessible. Share links are unique and only expose the specific form intended for you.

Security controls prevent one practitioner or clinic from accessing another clinic's client records. Digital signatures include timestamp and IP information for audit purposes.

Your records are retained according to applicable legal and regulatory requirements and your clinic's retention policy. Your practitioner can provide details of their specific retention period. You can request deletion of your information subject to legal and regulatory obligations.

Under UK GDPR you have the right to:

• Access the personal data held about you
• Correct inaccurate or incomplete information
• Request deletion of your personal data (subject to legal obligations)
• Object to or restrict certain processing
• Receive a copy of your data in a portable format

To exercise any of these rights, contact your practitioner using the contact details provided on your consent form. If you have concerns about how your data is handled, you can also contact the Information Commissioner's Office (ICO) at ico.org.uk.

For questions about your treatment or your personal data, contact your practitioner using the details shown on your consent form. For questions about the My Consent Forms platform, practitioners can contact support through the app.