PRIVACY POLICY

Privacy Notice

1. Scope
All data subjects whose personal data is collected, in line with the requirements of the GDPR and
UK Data Protection Act 2018.

2. Responsibilities
– The GDPR Owner is responsible for ensuring that this notice is made available to data
subjects prior to Yapa Plastic Surgery ( Company name Hasguard Holdings Ltd)
collecting/processing their personal data.
– All Employees/Staff of Yapa Plastic Surgery ( Company name Hasguard Holdings Ltd)
who interact with data subjects are responsible for ensuring that this notice is drawn to
the data subject’s attention and their consent to the processing of their data is secured.

3. Privacy notice
3.1 Who are we?
Mr Kshem Yapa of Hasguard Holdings Ltd offers an extensive range of cosmetic surgery and
treatments in state-of-the-art facilities.  He is a BAAPS-registered Consultant Plastic Surgeon
and subspecialised in your chosen procedure, ensuring the highest quality service and result.
Our GDPR Owner and data protection representatives can be contacted directly here:
– Mr Kshem Yapa – kshem@yapaplasticsurgery.com
– 02079418574
The personal data we would like to collect from/process on you is:
Personal Data Type : Source (where Yapa Plastic Surgery (company name Hasguard Holdings
Ltd) obtained the personal data from if it has not been collected directly from you, the data
subject. Note if the personal data has been accessed from publicly accessible sources):
Contact Details: Web contact form/Telephone

The personal data we collect will be used for the following purposes:
– Legitimate interests of the follow up to prospective customers via the website or telephone
enquiry and legitimate interests through the use of Hubspot CRM to keep track of prospective customers to the website
Our legal bases for processing for the personal data include:
• Subject gives consent for one or more specific purposes
• Processing for the purposes of legitimate interest pursued by controller
3.2 Consent
By consenting to this privacy notice you are giving us permission to process your personal data
specifically for the purposes identified.
You may withdraw consent at any time by contacting the GDPR owner at Yapa Plastic Surgery,
Mr Kshem Yapa – contact details below.
3.3 Disclosure
Yapa Plastic Surgery (Company name Hasguard Holdings Ltd) will not pass on your personal
data to third parties without first obtaining your consent, other than those organisations materially
involved in the daily operational processes of Yapa Plastic Surgery (Company name Hasguard
Holdings Ltd), namely:
• Microsoft
• Hubspot
• Consentz
3.4 Retention period
Yapa Plastic Surgery (Company name Hasguard Holdings Ltd) will process personal data for
no longer than 24 months from the completion of the follow up, should a contract not come into
effect and will store the personal data securely within the organization.
3.5 Your rights as a data subject
At any point while we are in possession of or processing your personal data, you, the data
subject, have the following rights:
– Right of access – you have the right to request a copy of the information that we hold
about you.
– Right of rectification – you have a right to correct data that we hold about you that is
inaccurate or incomplete.
– Right to be forgotten – in certain circumstances you can ask for the data we hold about
you to be erased from our records.
– Right to restriction of processing – where certain conditions apply to have a right to
restrict the processing.
– Right of portability – you have the right to have the data we hold about you transferred to
another organisation.
– Right to object – you have the right to object to certain types of processing such as direct
marketing and the right to object to automated processing, including profiling. You also have the right to be subject to the legal effects of automated processing or profiling.
– Right to judicial review: in the event that Yapa Plastic Surgery (Company name Hasguard
Holdings Ltd) refuses your request under rights of access, we will provide you with a
reason as to why. You have the right to complain as outlined in clause 3.6 below.
All of the above requests will be forwarded on should there be a third party involved (as stated in
3.3 above) in the processing of your personal data.

3.6 Complaints
In the event that you wish to make a complaint about how your personal data is being processed
by Yapa Plastic Surgery ((Company name Hasguard Holdings Ltd) (or third parties as
described in 3.3 above), or how your complaint has been handled, you have the right to lodge a
complaint directly with the supervisory authority and Yapa Plastic Surgery’s (Company name
Hasguard Holdings Ltd) GDPR Owner.
The details for each of these contacts are:
Supervisory authority contact details
Contact Name: Information Commissioner’s Office
Address line 1: Wycliffe House
Address line 2: Water Lane
Address line 3: Wilmslow
Address line 4: Cheshire
Address line 5: SK9 5AF
Telephone: 0303 123 1113

GDPR Owner contact details
Kshem Yapa
Yapa Plastic Surgery
55 Harley Street
London
W1G 8QR
Email: kshem@yapaplasticsurgery.com
Telephone: 02079418574
Document Owner and Approval

The GDPR Owner is the owner of this document and is responsible for ensuring that this record
is reviewed in line with the review requirements of the GDPR.
Signature: Kshem Yapa     Date: 11 th  Jan 2024

Change History Record

Issue 1
Description of Change Initial issue
Approval Kshem Yapa
Date of Issue 11th Jan 2024