Privacy Policy

1. Information We Collect

Personal Information

We may collect the following personal information:

• Name, email address, and phone number
• Date of birth and age
• Address and location details
• Medical history and health information relevant to treatments
• Treatment preferences and aesthetic goals
• Photographs (before/after images taken with your explicit consent)
• Payment and billing information

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website or source

2. How We Use Your Information

We use your personal information for the following purposes:

• Treatment Services: To provide, plan, and deliver aesthetic treatments safely and effectively
• Communication: To respond to inquiries, schedule appointments, and provide treatment updates
• Medical Records: To maintain accurate medical records as required by law
• Safety & Care: To assess suitability for treatments and ensure your safety
• Marketing: To send promotional materials and special offers (with your consent)
• Legal Compliance: To comply with legal obligations and professional standards
• Improvement: To improve our services, website, and client experience

3. Legal Basis for Processing

We process your personal data based on:

• Consent: When you provide explicit consent for treatments, photography, or marketing
• Contract: To fulfill our contractual obligations to provide aesthetic services
• Legal Obligation: To comply with healthcare regulations and professional requirements
• Legitimate Interest: To operate our business, improve services, and ensure safety

4. How We Protect Your Information

We take data security seriously and implement appropriate measures to protect your information:

• Secure storage of physical and electronic records
• Password-protected systems and encrypted data transmission
• Limited access to personal information (only authorized personnel)
• Regular security reviews and updates
• Compliance with UK Data Protection Act 2018 and GDPR
• Professional indemnity and data protection insurance

5. Sharing Your Information

We do not sell or rent your personal information. We may share your data only in the following circumstances:

• Healthcare Professionals: With your GP or medical professionals if medically necessary (with your consent)
• Legal Requirements: When required by law, court order, or regulatory authority
• Service Providers: With trusted third-party service providers (e.g., payment processors, booking systems) who are contractually obligated to protect your data
• Emergency Situations: To protect your vital interests in medical emergencies

6. Photography and Consent

Before/after photographs and treatment images:

• Are taken only with your explicit written consent
• Will be stored securely as part of your medical records
• Will not be shared publicly, on social media, or for marketing without separate, specific consent
• Can be withdrawn at any time (we will delete images upon request)
• May be anonymized for professional training or consultation purposes (with consent)

7. Your Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)

To exercise any of these rights, please contact us at l.a.aestheticsclinic.uk@gmail.com

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide ongoing treatment and care
• Comply with legal and regulatory requirements (medical records must be retained for a minimum of 8 years from the last treatment)
• Resolve disputes and enforce our agreements

After the retention period, we securely delete or anonymize your data.

9. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

• Improve website functionality and user experience
• Analyze website traffic and visitor behavior
• Remember your preferences

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., Instagram, booking platforms). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing personal information.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you are under 18, please do not provide any information without parental consent.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a revised "Last Updated" date.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

14. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK supervisory authority:

Your Privacy Matters

By using our services or website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services or provide personal information.