Legal
Privacy Notice
Quick answer: If you send an enquiry, I collect your contact details and hair loss information (including any photos) to assess your case. If you proceed, that information is shared with the specific partner clinic treating you, including a clinic in Turkey. Turkey does not have a UK or EU data adequacy decision, so that transfer is covered by Standard Contractual Clauses signed with the clinic, not just your consent.
Who I am
Resolute Hair UG (haftungsbeschränkt), Berlin, Germany, is the controller of your personal data for the purposes of UK GDPR and EU GDPR. For any privacy question, contact jon@resolutehair.com.
What I collect
- Contact details: name, phone number, email address
- Hair loss information: your Norwood scale assessment, and any photographs you choose to share of your scalp or hairline
- Enquiry details: your treatment timeframe, and anything else you tell me directly
- If you book: booking and payment records, and communication with your clinic about your treatment and aftercare
Why I collect it, and on what basis
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and assessing candidacy | Steps taken at your request, before entering a contract (UK/EU GDPR Art 6(1)(b)) |
| Sharing your hair loss information and photos with a partner clinic | Your explicit consent (Art 9(2)(a), for special category health data) |
| Coordinating your booking and treatment | Performance of a contract with you (Art 6(1)(b)) |
| Occasional updates and marketing | Your consent, given separately and always optional (Art 6(1)(a)) |
Who your data is shared with
Your hair loss information is shared only with the specific partner clinic relevant to your enquiry, not with every clinic in the network. Each partner clinic is contractually bound to use your data solely to assess and provide your treatment, and to keep it confidential.
Service providers
I also use a small number of service providers to run Resolute Hair. They process personal data only on my instructions, under a data processing agreement, and are not permitted to use it for their own purposes:
- Cloudflare hosts this website and receives your enquiry form submission.
- Pipedrive stores your enquiry, contact details and any photos you share, so I can manage your enquiry.
- Resend sends emails on my behalf, such as the confirmation email you receive after an enquiry. These emails contain your name and email address only, not your hair loss information or photos.
- Calendly is used if you choose to book a call through it.
- Google (Analytics and Ads) is used only if you accept cookies, to understand how visitors find the site and to improve advertising.
- WhatsApp (Meta) is used only if you choose to message me there.
Some of these providers are based in, or may transfer data to, the United States. Where that happens, the transfer is protected by the EU-US Data Privacy Framework or by Standard Contractual Clauses, as applicable.
International transfers
Partner clinics are located in Turkey, which does not have a UK or EU data adequacy decision. Because every patient referral involves this transfer, I don't rely on your consent alone as the basis for it. Before any clinic joins the network, Resolute Hair signs Standard Contractual Clauses with that clinic, the standard safeguard recognised under Article 46 GDPR for transfers to a country without an adequacy decision. Your consent (above) covers the sharing of your health data specifically; the Standard Contractual Clauses are what make the international transfer itself lawful on an ongoing basis.
How long I keep it
If you don't proceed past an initial enquiry, your details are kept only as long as needed to respond to you, and are deleted after a reasonable period of inactivity. If you book treatment, your records are kept for as long as needed to provide treatment and aftercare, and afterwards in line with applicable legal and professional retention requirements.
Your rights
You can ask to access, correct, delete, or restrict the personal data I hold about you, and you can withdraw consent at any time without affecting anything done before that withdrawal. To exercise any of these, email jon@resolutehair.com. If you're not satisfied with my response, you can complain to the UK Information Commissioner's Office (ico.org.uk) or, if you're in the EU, your local data protection authority.
Cookies
This site uses cookies for analytics and advertising, gated behind the cookie banner shown when you first visit. You can change your choice at any time by clearing your browser's local storage for this site.
Questions about how your data is handled? Ask me directly.
Get in touchThis notice describes how Resolute Hair handles personal data. It is general information, not a substitute for independent legal advice, and will be reviewed and updated as the business and its clinic network develop.