privacy policy
-
[BUSINESS LEGAL NAME], trading as [BRAND NAME], is responsible for deciding how your personal information is collected and used.
[BUSINESS ADDRESS]
[PRIVACY EMAIL]
[TELEPHONE]We are committed to handling your information responsibly, securely and in accordance with applicable UK data protection law.
-
Depending on how you interact with us, we may collect information such as your name, date of birth, contact details, appointment history and payment information.
Because we provide medical and aesthetic services, we may also collect health information where it is relevant to providing safe and appropriate treatment. This can include medical history, allergies, medication, previous treatments, treatment plans, consent records, clinical photographs and information relating to treatment outcomes or complications.
We only collect information that is relevant and reasonably necessary.
-
Your medical information allows us to assess whether treatment is appropriate and safe, provide your treatment, obtain informed consent, provide appropriate aftercare and maintain accurate clinical records.
We may also need to use relevant information to manage complications, respond to complaints, meet professional or legal obligations, or establish or defend a legal claim.
Health information is considered special category personal data under UK data protection law and receives additional protection.
-
We will only share information where there is an appropriate lawful basis to do so.
Where necessary, this may include healthcare professionals involved in your care, pharmacies, laboratories, professional advisers, insurers or indemnity providers, regulators or statutory bodies, and trusted service providers who process information on our behalf.
We will never sell your personal information.
-
Yes. Patient confidentiality is fundamental to our practice.
We take appropriate technical and organisational measures to protect your information from unauthorised access, loss, alteration or disclosure.
There are limited circumstances where information may need to be disclosed without your consent, for example where required by law, court order, professional or regulatory obligations, or where necessary to protect you or another person from serious harm.
-
Clinical photographs may be taken where appropriate for assessment, treatment planning, monitoring results, clinical records, follow-up, clinical governance or the management of complications.
Clinical photographs form part of your confidential medical information.
Clinical photography and marketing photography are not the same thing.
We will obtain separate, specific consent before using an identifiable photograph for our website, social media, advertising or other promotional purposes. You do not have to agree to marketing use of your photographs in order to receive treatment.
-
We retain personal and clinical information only for as long as it is reasonably necessary and in accordance with applicable legal, regulatory, professional and insurance requirements.
Clinical records may need to be retained for a significant period after your treatment.
We periodically review the information we hold and securely dispose of information when it is no longer required.
-
We use appropriate technical and organisational measures to protect your personal and medical information.
Access to confidential information is restricted to people who genuinely need it.
While no electronic system can be guaranteed to be completely secure, we take reasonable steps to protect your information against unauthorised access, accidental loss, destruction, alteration or disclosure.
-
Only where permitted and, where required, where you have given appropriate consent.
You can unsubscribe from marketing communications at any time.
Withdrawing marketing consent will not affect the treatment or services you receive from us.
Your medical information will not be used for marketing simply because you have provided it to us for clinical purposes.
-
Our website may use cookies and similar technologies to make the website function properly and, where permitted, understand how visitors use it.
Where required, we will ask for consent before using non-essential cookies.
You can also control cookies through your browser settings.
-
Yes. Like most modern businesses, we may use trusted third-party providers for services such as booking, payments, website hosting, email, SMS, clinical software, accounting and data storage.
Where these providers process personal information on our behalf, we take appropriate steps to ensure that suitable data-protection arrangements are in place.
-
Some service providers may process information outside the UK.
Where this happens, we will take appropriate steps to ensure that any international transfer is carried out in accordance with applicable UK data protection law.
-
Subject to certain legal exemptions, you may have the right to:
Ask what personal information we hold about you
Request correction of inaccurate information
Request deletion in certain circumstances
Ask us to restrict certain processing
Object to certain processing
Request transfer of certain information
Withdraw consent where processing is based on consent
Some rights have specific limitations, particularly in relation to medical records and legal obligations.
We may need to verify your identity before responding to a request.
-
Please contact us first so that we can understand and investigate your concern.
You also have the right to raise a complaint with the Information Commissioner's Office (ICO).
[PRIVACY EMAIL]
-
This Privacy Policy explains how we handle your personal information.
It does not replace our clinical consent forms, treatment-specific information, aftercare instructions or Terms & Conditions.
Those documents contain additional information relevant to your treatment.
-
Yes. We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or the way we process information.
The latest version will always be available on this website.
Last updated: [DATE]
