Last updated: April 2026
This policy explains how Goodfellow Systems collects, uses, and protects personal data. We are committed to handling your information responsibly and in compliance with the UK GDPR and the Data Protection Act 2018.
Contents
Goodfellow Systems ("we", "us", "our") is a specialist patient acquisition agency serving hair restoration clinics including hair transplant clinics, scalp micropigmentation (SMP) clinics, and PRP hair treatment clinics.
We are the data controller for personal data collected through our website at www.goodfellowsystems.com and through our general business operations.
Where we process data on behalf of our clinic clients as part of delivering our services, we act as a data processor. Each clinic client is the data controller for their own patient data, and separate data processing agreements apply.
We may collect the following categories of personal data:
We do not collect or process patient medical data directly. Any patient data processed as part of campaign delivery is handled under separate data processing agreements with clinic clients.
We use the personal data we collect for the following purposes:
We do not use your personal data for unsolicited marketing without your consent, and we do not sell your data to third parties.
We process personal data under the following legal bases as defined by UK GDPR:
We may share your personal data with trusted third-party service providers who assist in operating our business, including:
All third-party providers are contractually required to process your data only as instructed and in accordance with applicable data protection law.
We do not transfer personal data outside of the UK or EEA without ensuring appropriate safeguards are in place.
Our website uses cookies and similar tracking technologies to improve user experience and gather analytics. These include:
You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
When data is no longer required, it is securely deleted or anonymised.
Under UK GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, please contact us using the details in Section 12. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include access controls, encrypted communications, and regular review of our data handling practices.
While we take reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to minimising risk.
Our website may contain links to third-party websites, including advertising platforms and partner tools. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will be revised accordingly.
We encourage you to review this policy periodically. Continued use of our website or services following any update constitutes acceptance of the revised policy.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Goodfellow Systems
www.goodfellowsystems.com
For data protection enquiries specifically, please include "Data Protection" in the subject line of your communication.