Privacy policy

Who we are

Alpha Male Clinic is the data controller for the personal data described in this policy. The clinic operates from Regus, Manchester Airport, 3000 Aviator Way, Manchester, M22 5TG. You can contact us about data protection by email at main@alphamaleclinic.co.uk or by phone on 07519 417695.

What data we collect

• Identity and contact details: name, email address, phone number, and date of birth or age confirmation.
• Health data: symptoms, medical history, medication, allergies, treatment records, clinical photographs where you consent to them, and outcomes.
• Enquiry and assessment data: the answers you give in the online assessment, and the content of calls, emails and WhatsApp messages with the clinic.
• Payment data: the record of deposits and payments. Full card details are handled by the payment provider and are not stored by the clinic.
• Technical data: IP address, device and browser information, and analytics data where you have consented to non-essential cookies.

Lawful basis for processing

• Contract: to arrange appointments, take deposits and provide the treatment you have asked for.
• Legitimate interests: to respond to enquiries, keep the clinic running safely and improve our service, where that does not override your rights.
• Consent: for marketing communications, for non-essential cookies and analytics, and for the use of clinical photography beyond your own records.
• Legal obligation: to meet clinical record keeping, tax and reporting duties.
• Vital interests: in a medical emergency where you cannot give consent.

Special category health data

Health data is special category data under UK GDPR. We process it under Article 9(2)(h), for the provision of health care and treatment by, or under the responsibility of, a health professional bound by a duty of confidentiality, together with the safeguards in Schedule 1 of the Data Protection Act 2018.

Clinical photographs are only taken with your written consent. Consent to treatment and consent to any wider use of images, such as educational material on this website, are recorded separately, and you can withdraw consent for wider use at any time.

Nothing is shared with your NHS GP unless you give written consent, or unless we are required to share it by law or to protect someone from serious harm.

Who we share data with

• Clinicians and staff involved in your care, including partner clinicians where your treatment requires it.
• Service providers acting on our instructions under a written contract, including our booking and customer relationship platform, hosting provider, payment provider and email provider.
• Regulators, insurers or legal advisers where we are required or permitted to share data.

How long we keep data

• Adult clinical records, including consent forms and clinical photographs: 10 years after the last contact, in line with UK guidance for private medical records.
• Enquiries that do not become appointments: 12 months from the last contact.
• Financial records: 6 years plus the current financial year, for tax purposes.
• Marketing consents and withdrawals: for as long as needed to prove the consent position.

Cookies and analytics

Essential cookies keep the website working, remember your 18+ confirmation on age-restricted pages, and hold your cookie choice. They do not need your consent.

Analytics and advertising cookies are only set after you accept them in the cookie banner. Non-essential tags are blocked until then. You can change your choice at any time by clearing the site's cookies and reloading the page.

Security

Data is held on access-controlled systems, transmitted over encrypted connections, and available only to staff who need it for your care. Clinical photographs are stored separately from marketing systems.

International transfers

Some of our service providers process data outside the UK. Where that happens, transfers are covered by UK adequacy regulations or the International Data Transfer Addendum to the EU standard contractual clauses.

Your rights

• Access: to a copy of the personal data we hold about you, including your clinical record.
• Rectification: to have inaccurate data corrected.
• Erasure: to have data deleted, subject to our legal duty to retain clinical records.
• Restriction and objection: to limit or object to certain processing, including profiling for marketing.
• Portability: to receive data you gave us in a portable format.
• Withdraw consent: at any time, where processing relies on consent. Withdrawal does not affect processing already carried out.

Complaints

Please raise any concern with us first, by email at main@alphamaleclinic.co.uk. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF, or at ico.org.uk.

Changes to this policy

This policy was last updated on 2 September 2026. Where changes are material, we will say so on this page.