Privacy Policy

• Mail encryption– Pabau is using a provider Mandrill who is GDPR compliant, and who also enforces encryption upon email send. You will even notice the ‘Sensitive Data’ feature found when sending an email.
• Audit Logs– Pabau is slowly rolling out audit logs across the entire platform, whilst this is not a specific requirement, it is something that will allow for better transparency further down the line.
• Sharing – any email that is sent or shared via Pabau can be seen under the communications tab.
• Data File Request– Pabau has introduced procedures in order for us to be able to cope with a data file request.
• Consent – Pabau introduced a feature into step 1 of the paperless app, which allows our staff to withdraw consent. You will notice you can also withdraw consent via the client card.
• Data Breach– Our staff at HSA Dermal Clinic know how to escalate a security incident to our Clinic Manager/Director to determine whether a breach has occurred.
• Our Partners– All partners and suppliers who are handling data are also compliant with GDPR.
• Appointed DPO– Pabau has appointed a data protection officer.
• Lead API– HSA Dermal Clinic can use Pabau’s Lead API for our inbound website inquiries.
• EU Hosted– Pabau guarantee that data does not transfer outside the EU unless the transfer complies with chapter V of the GPDR.

Our privacy policy allows you to request correction or deletion of your data.