Table of Content
Location9033 Wilshire Blvd, Suite 200 Beverly Hills, CA 90211
Phone no.
Effective Date:January 1, 2013
International Microtia Institute Privacy Policy: UK and EEA only
About this Privacy Policy
This UK/EU Privacy Policy applies only to individuals located in the United Kingdom or European Economic Area. It explains our processing of personal data when you interact with us online, in person, or otherwise. Generally, we collect, use, and share personal data in connection with providing our services and operating our practice, including the diagnosis, evaluation, and surgical treatment of craniofacial conditions.
Please note that there is a separate Privacy Policy for individuals located in the US and anywhere other than the UK and EEA.
We are International Microtia Institute. We are located at 9033 Wilshire Blvd, Suite 200 Beverly Hills, California 90211.
We process your personal data in our capacity as a controller. This means that we are responsible for deciding how we hold and use your personal data and ensuring that we comply with relevant data protection laws when processing your personal information.
What is personal data?
Personal data is any data relating to an identified or identifiable natural person who can be directly or indirectly identified from that data. This includes obvious things like your name, address and telephone number but can also include less obvious things like analysis of your use of our website. There are different types of personal data. The most important types for you to know about are:
- Special categories of personal data – these categories of personal data often have additional protection under data protection laws around the world. These categories include information about your health, racial or ethnic origin, political opinions, religious or philosophical beliefs and trade union membership, your genetic data and biometric data, and information concerning your sex life or sexual orientation. Local data protection laws may limit the way in which we can use this information when compared to, for example, your name and address.
- Criminal convictions information – this is information relating to your criminal convictions and offences. Local data protection laws may restrict the way in which we can use this information when compared to, for example, your name and address.
Why is International Microtia Institute collecting personal data about you?
We collect personal data about you in connection with our provision of services and the running of our business more generally. We may hold information about you if:
- you are a prospective, current or former patient of International Microtia Institute;
- you are a parent or guardian of a prospective, current or former patient of International Microtia Institute;
- you visit our facility, e.g. when accompanying a patient of International Microtia Institute; or
- you engage with our adverts or visit our websites (including where you contact us through our websites).
We cannot force you to provide your personal data to us, and you can choose not to provide us with your personal data. Where we need to collect your personal data by law or in order to provide you with our medical services or perform a contract we have with you and you decide not to provide that information when requested, we may not be able to provide our medical services to you.
What personal data does International Microtia Institute collect about you?
We may collect the following types of personal data:
| Types of personal data | Details |
| Individual details | Your name, address, other contact details (for example, email address and telephone numbers), gender, marital status, date and place of birth, nationality, employer, job title and job category. |
| Identification details | Identification numbers issued by government bodies or agencies, such as your passport number, tax identification number and driving licence number. |
| Device and browser information | When you visit or access our website, your browser automatically sends certain information such as browser type, language preference, operating system, internet service provider, internet protocol (IP) address, device identification number, geo-location data, and online browsing data (such as date and time of access to our website, referring website address, pages viewed, features used, links clicked, and other actions you take in connection with the website, sometimes referred to as “clickstream data”). |
| Financial information | Bank account or payment card details or other financial information. |
| Special categories of personal data | Information about your health, racial or ethnic origin, religious or philosophical beliefs; and your genetic and biometric data. |
| Criminal convictions information | Information relating to your criminal convictions and offences. |
Where does International Microtia Institute collect your personal data from?
We may collect your personal data from various sources, including:
- directly from you or your devices, including through the use of website tracking tools. Further information on this is set out in the section below; and
- from third parties such as medical insurance companies, where applicable.
How does International Microtia Institute use your personal data?
We may process your personal data in many different ways – including by collecting, recording, organising, storing, analysing, modifying, extracting, sharing, deleting and/or destroying it. This section sets out:
- the main purposes for which we generally process your personal data; and
- the legal bases upon which we are processing your personal data.
| Purpose | Legal bases |
| Operating our business
We may collect your personal data in order to operate our business, for example where you are a prospective, current or former patient of International Microtia Institute. This may include processing special category personal data such as your health information. |
For all information
Legitimate interests. We have a legitimate interest in using your information where this is necessary or appropriate to operate our business, including to provide services to our patients. Performance of contract. The processing of your personal data may be necessary in relation to the contract we have entered into with you. For special category and criminal data Health or social care purposes. We may process your personal data for health or social care purposes including medical diagnosis or the provisions of healthcare or treatment Vital interests. We process special category information relating to you when this is necessary in order to protect your vital interests. |
| Responding to enquiries
We may collect your personal data to respond to enquiries from you and to provide you with information about our business and the medical services that we offer. |
Legitimate interests.
We have a legitimate interest in using your information where this is necessary or appropriate to respond to your enquiries or provide you with information about our business and the medical services that we offer. |
| Targeted advertising
We may provide you with targeted advertising via platforms such as Google Ads, Meta (Instagram) and TikTok. The targeted ads are based on your activity on our websites and applications and on third party websites and applications. We do not use special category data such as health information for these purposes. |
Consent.
We will only collect your information for targeted advertising purposes where you have opted in to this. |
| Visitors to International Microtia Institute
We have security measures in place at our facility, which include building access controls and may include CCTV. Images captured by CCTV are securely stored and only accessed on a need to know basis (e.g. to look into an incident). CCTV recordings are typically automatically overwritten after a short period of time unless an issue is identified that requires investigation (such as a theft). We require visitors to International Microtia Institute to sign in at reception and we keep a record of visitors for a short period of time. Our visitor records are securely stored and only accessible on a need to know basis (e.g. to look into an incident). We do not generally look to collect special categories of personal data and criminal convictions data for this purpose. |
Legitimate interests.
We have a legitimate interest in making sure our facility, and the people that visit and work at International Microtia Institute, are safe and secure. |
| Visitors to International Microtia Institute websites
Our websites may invite you to provide us with personal information, e.g. in order to contact us. Sometimes we, our processors, and our trusted marketing partners also set and use cookies and similar technologies to store and manage user preferences, enable content, gather analytic and usage data, and deliver targeted advertising. A cookie is a small text file that is placed on a computer or other device and is used to identify the device and to collect information. Our website uses the following types of cookies:
You can control many of those cookies by updating your browser settings. And, when you first visit our websites, you can elect whether to accept analytic and marketing cookies. You can also change your choice at any time by adjusting your selection in our cookie preference center. |
For all information
Legitimate interests. We have a legitimate interest in providing to you the facilities on our websites that you have requested and in understanding how our websites are used and the relatively popularity of the content on our websites. Consent Where we cannot rely on our legitimate interests to process your personal information for any of these purposes, we will do so only with your consent. For special category data Health or social care purposes. We will only collect special category personal data via our websites where you specifically provide this to us, e.g. via a message in our contact form. We will then process your personal data for health or social care purposes including medical diagnosis or the provisions of healthcare or treatment. Special category data is not used for targeted advertising purposes. |
| Establishing our legal position
We may use and/or release your personal data – including sharing it with our legal advisers – when looking to establish our legal position (including with respect to the data protection authorities that regulate our business). In some cases, this information may include special categories of personal data and criminal convictions data. |
For all information Legitimate interests.
We have a legitimate interest in understanding and establishing our legal rights and obligations. For special category and criminal convictions data The establishment, exercise, or defence of legal claims. |
How can you withdraw your consent?
We do not generally process your personal data based on your consent (as we can usually rely on another legal basis). Where we do process your personal data based on your consent, you have the right to withdraw your consent at any time. To withdraw your consent please email us at [email protected]. Once we have received notification that you have withdrawn your consent, we will no longer process your personal data for the purpose(s) to which you originally consented unless there is another legal ground for the processing. Please note that where we rely on your consent to process your personal data and you choose to withdraw your consent, your decision may affect our ability to provide certain of our services to you.
Does International Microtia Institute share your personal data with anyone else?
We may share your personal data in the following circumstances:
- in order to operate our business efficiently, we require the assistance of various external service providers, particularly in relation to our IT systems. Some of these services (such as email hosting and data backups) involve the service provider holding and using your personal data. In each case where we share your information with one of our service providers, the service provider is required to keep it safe and secure and make sure it is properly protected. They are also not permitted to use your information for their own purposes;
- we may provide social media and other platforms (such as Google Ads, Meta and TikTok) with limited personal data about you, such as certain identifiers or your hashed email address, which they match with their customers’ profiles. Using this information, together with information the platform already has collected about you, the platform may show you our ads, look for other users who may enjoy our ads, suppress our ads for you, and provide us insights on how to optimize and better target our advertising. Please note that the platform, rather than us, is responsible for the data about you that they collect, so please refer to their privacy notices and policies for information about how they use the data about you that they hold;
- in connection with a sale or business transaction. If we sell our business or undergo another business transaction (such as a reorganisation, merger, joint venture, assignment, transfer, or other disposition of any or all portion of our business, assets, or stock, including in connection with any bankruptcy or similar proceedings), then your information may be shared with, or transferred to, a third party;
- to protect the rights, property and safety of International Microtia Institute and others. Such information will be disclosed in accordance with applicable laws and regulations. This includes where we share information with other parties in the context of litigation discovery and in response to subpoenas and court orders; and
- we share your personal data with other third parties, such as relevant public and government authorities, including regulators and law enforcement bodies, where we are required or requested to do so to comply with legal or regulatory requirements.
What other important things should you know about International Microtia Institute Center’s privacy practices?
Security
We recognize the importance of maintaining the security of your information. We have implemented technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, use, and modification. Please be aware though that no security measures are perfect or impenetrable.
Profiling and automated decision making
We do not use profiling (where an electronic system uses personal data to try and predict something about you) or automated decision making (where an electronic system uses personal data to make a decision about you without human intervention).
Retention
We keep your personal data for no longer than is necessary for the purposes described in this Privacy Policy and, in any event, no longer than we are permitted to under applicable law.
Our retention periods are based on the requirements of relevant data protection laws and the purpose for which the information is collected and used, taking into account legal and regulatory requirements to retain the information for a minimum period, limitation periods for taking legal action, good practice and our business purposes.
If you would like further details regarding applicable retention periods, please email us at [email protected].
Cross border transfers
International Microtia Instituteis located in the USA. Your personal data may be transferred across national boundaries, including, potentially, to countries that do not require organisations by law to look after your personal data in the way in which you have come to expect in your own country. Where we transfer your personal data across national boundaries, we will protect your personal data by ensuring that those transfers are made in compliance with all relevant data protection laws.
If you would like further details of how your personal data is protected when transferred from one country to another then please email us at [email protected].
Updates to this Privacy Policy
This Privacy Policy may be updated periodically and will be posted on the website, indicating when it was last updated. If we make material changes, we will post a prominent notice on our website and/or provide other notice as required by law.
This Privacy Policy was last updated in July 2024.
Links to Third Party Sites
From time to time, we may provide links to unaffiliated third-party websites. Those websites operate independently from us and our affiliates and may have their own privacy policies in place which we recommend you review if you visit any linked websites. The ability to access information of third parties from our website, or links to other websites, locations, products, or services, is for your convenience and does not signify our endorsement of such third parties, their services, other websites, locations, or their contents.
How can you exercise your rights?
Contacting us and your rights
If you have any questions or complaints in relation to our use of your personal data, please email us at [email protected].
Under certain conditions you may have the right to require us to:
- provide you with further details on the use we make of your personal data;
- provide you with access to the personal data we hold about you;
- update any inaccuracies in the personal data we hold about you;
- delete any of your personal data that we no longer have a lawful ground to use;
- where processing is based on consent, stop that processing by withdrawing your consent (which you may do at any time);
- object to any processing based on our legitimate interests unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights;
- restrict how we use your personal data whilst a complaint is being investigated; and/or
- transfer your personal data to you or to a third party in a standardised machine-readable format.
In certain circumstances, we may need to restrict your rights to safeguard the public interest (for example, the prevention or detection of crime) and our interests (for example, the maintenance of legal privilege).
To exercise any of your rights, please email us at [email protected]. We will assess any request to exercise your rights on a case-by-case basis and we may ask you for proof of identity or other information before doing so.
We also are obliged to keep your personal data accurate and up to date. Please help us to do this by advising us of any changes to your personal data.
Please note that if you ask us to delete your personal data, it may take us more time to delete your information from our back-up systems than it does from our active servers.
Your right to complain
If you are not satisfied with our use of your personal data or our response to any request by you to exercise your rights, or if you think that we have breached any relevant data protection laws, then you have the right to complain to the data protection authority in your country.
In the UK, the relevant supervisory authority is the Information Commissioner’s Office (ICO). Details of the ICO can be found at https://ico.org.uk.
How can you contact International Microtia Institute?
If you have questions about this Privacy Policy, you can email [email protected] or call us at (310) 255-4476.