Privacy Policy

Your personal information is handled with complete discretion, in full compliance with UK GDPR and the Data Protection Act 2018.

We collect only what we need — consultation details, medical history, treatment notes, and contact information for appointment reminders and aftercare. Photographs may be taken to monitor treatment progress, but will never be used externally without your signed consent. Your details are never shared with third parties unless legally required or you have explicitly agreed.

All records are stored securely: paper files in locked storage, digital records encrypted and password-protected. We retain records for seven years, or until age 25 for clients who were under 18.

You have the right to access your records, request corrections, withdraw from marketing at any time, and ask for deletion where the law permits. Any suspected data breach will be investigated immediately and reported to the ICO where required.

Waiting lists. If you ask to join a practitioner's waiting list (for example the waiting list for hairdressing with Mari), we store the details you give us, your name, phone number, optional email address and any note, securely in our website's content system so the practitioner can manage the list and contact you by phone or text. A copy of each request is sent by email to the clinic team so they know you have joined. These details are held by our website content system (Sanity) and notification emails are delivered by our email provider (Resend), acting as processors on our behalf.

We keep waiting list details for up to 12 months from the date you join or we last contact you, whichever is later, after which they are deleted. You can ask for your details to be removed from the list at any time using the contact details below.

To access your records or raise a privacy concern, contact us in writing at madogsba@gmail.com.