Privacy Policy

We take all steps necessary to keep your information secure.

• Your data is stored securely on encrypted devices.
   
• Only authorised staff have access.
   
• Paper documents (if used) are locked in secure storage.
   
• We do not sell or share your data with third parties for marketing purposes.
   
• We keep your medical records for the legally required duration (usually 7 years).
  After this period, your data is securely deleted or shredded.

We do not share your information unless necessary.
We may share data only with:

• Insurance providers (if required for legal reasons)
   
• Third-party services that process bookings or payments securely (e.g., Stripe, Fresha, Ovatu)
   
• Healthcare professionals (with your consent or in emergencies)
   
• Regulators or authorities when legally required

We never share your information for advertising or sales purposes.

Clinical photographs are often needed for:

• Treatment planning
   
• Medical records
   
• Progress tracking
   
• Insurance compliance
  

These are kept confidential unless you provide explicit written consent for them to be used for marketing purposes (social media, website, etc.).
You may withdraw consent at any time.

You have the right to:

✔ Access the personal data we hold about you
✔ Correct inaccurate information
✔ Withdraw consent (for marketing or photographs)
✔ Request deletion of your data (where legally permitted)
✔ Request data portability
✔ Restrict processing in certain circumstances
✔ Complain to the Information Commissioner’s Office (ICO)