Privacy notice

Health information is a special category of personal data, and I treat it that way. This notice explains what I collect, why, how long I keep it and what you can ask me to do about it. If anything here is unclear, please ask.

Who I am

Beyond Alopecia is operated by Brigita Deveikaite, a certified trichologist based in Barcelona, Spain, working online. I am the data controller for everything described here, and I handle it personally rather than through a team.

The quickest way to reach me about anything on this page, including asking for a copy of your records or asking me to delete them, is hello@beyondalopecia.com. A postal address is available on request.

What I collect

Contact details, information you provide in the enquiry form or intake questionnaire, consultation notes, and any photographs or results you send. Website statistics are collected using Cloudflare Web Analytics, which sets no cookies, uses no fingerprinting and does not collect personal data, which is why this site has no cookie banner.

Why, and on what basis

To answer your enquiry: your consent, given when you tick the box on the contact form. To provide a consultation and write your summary: performance of our contract, and, because hair and scalp information is health data, your explicit consent, given in the intake questionnaire. To send the newsletter: your consent, confirmed by clicking the link in the confirmation email. To keep records after your consultation: my legitimate interest in being able to advise you properly if you return, and in defending a complaint. You can withdraw consent at any time.

How long it is kept

Consultation records and any photographs you send are kept for five years from your last appointment, then securely deleted. Enquiries that do not lead to a consultation are deleted within twelve months. You can ask for your records at any time, and you can ask me to delete them.

Who it is shared with

Only with the services needed to run the practice, and only what each one needs: Cloudflare (website hosting, form handling and the database holding your enquiry), Resend (sending email), MailerLite (the newsletter, if you subscribe), Stripe (payment, if you book), Cal.com (scheduling) and Google Meet or Zoom (the consultation itself). Your information is never sold, never used for advertising, and never shared with another practitioner without your written permission.

Your rights

Access, correction, erasure, restriction, portability and objection, and the right to complain to a supervisory authority. Contact hello@beyondalopecia.com.