Privacy notice

Who we are

What we collect

• Who you are: your name, date of birth, email address, phone number and address.
• Your health: medical history, medication, allergies, consent forms, service notes and clinical photographs. This is sensitive information and we treat it accordingly.
• Your appointments and orders: what you booked, with whom, what was paid and what was supplied.
• Your messages: enquiries and correspondence with the clinic.
• Site use: pages viewed, and only with your permission, anonymous usage measurement. Card details are handled by our payment provider and never stored by us.

Why we hold it

• To treat you safely. Health information is held so that a clinician can assess, treat and follow up on your care, and because we are professionally required to keep a record of it.
• To fulfil what you asked for. Appointments, prescriptions, products and payments.
• To run the clinic properly. Accounting, insurance, complaint handling and regulatory obligations.
• With your consent. Marketing emails, clinical photography used for anything other than your own record, and non-essential cookies. You can withdraw consent at any time.

How long we keep it

• Service records, consent forms and clinical photographs: 8 years after your last appointment, in line with medical record-keeping guidance.
• Marketing contact details: 24 months after you last engaged with us, or immediately if you unsubscribe.
• Financial records: six years, as tax law requires.
• Cookie choices: kept as a record of your consent, and refreshed when you change it.

Who sees it

Only clinic staff who need it for your care or for running your appointment. Access to clinical notes is limited by role and is logged. We also use trusted suppliers who process data on our instructions — appointment and email delivery, payment processing, and secure hosting of the clinic system. We never sell your information, and we do not share it with anyone else unless you ask us to, or the law requires it.

Your rights

You can ask us for a copy of everything we hold about you, ask us to correct anything wrong, ask us to delete information we no longer need, object to how we use it, ask us to restrict its use, or withdraw a consent you gave. We will respond within one month.

One limit worth knowing: we cannot delete a service record before the retention period above, because we are professionally and legally required to keep it. We can, however, stop using it for anything other than that.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

Our cookie notice explains what each cookie does. You can change your mind at any time.