Privacy Policy | ElegantT Aesthetics

ELEGANT THEORY AESTHETICS PRIVACY POLICY

Effective Date: 28/02/2025
Last Updated: 06/03/2025

1. Introduction

Elegant Theory Aesthetics ("we," "us," or "our") is committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our clinic, website, or engage with our services and social media platforms.

2. What Information We Collect

We may collect the following personal data:

Identity Data – Full name, date of birth, and gender.
Contact Data – Email address, phone number, and home address.
Medical Data – Health information relevant to your treatment (e.g., medical history, allergies, contraindications).
Treatment Data – Details of treatments received, consultation notes, and progress records.
Visual Data – Before-and-after photos (with your consent).
Marketing & Communication Data – Testimonials, social media engagement, and marketing preferences.
Website & Social Media Data – IP address, device information, cookies, browsing behaviour, and interactions with our website or social media pages.

3. How We Use Your Data

We collect and process your personal data for the following purposes:

Providing aesthetic treatments and ensuring your safety.
Booking and managing appointments efficiently.
Maintaining medical records as required by healthcare regulations.
Marketing and promotional purposes, including sharing testimonials and before-and-after images (with your explicit consent).
Improving our services through client feedback and service analysis.
Analyzing website traffic and social media engagement to enhance user experience.
Complying with legal and regulatory obligations.

4. How We Store & Protect Your Data

All personal data is stored securely in electronic or paper-based formats, accessible only to authorized personnel.
We implement strict data security measures to prevent unauthorized access, misuse, or loss.
Client photos are only used for marketing if explicit consent has been given.
We do not sell or share your personal data with third parties unless required by law.

5. Website & Social Media Data Handling

When you visit our website or engage with our social media pages, we may collect additional data such as:

Your IP address and device information.
The pages you visit and the time spent on them.
Interactions with ads, social media posts, and website content.
Any comments, messages, or inquiries sent via social media or website forms.

We use this data to:

Improve our website functionality and user experience.
Track the effectiveness of our social media campaigns.
Respond to inquiries and customer service requests.
Comply with social media platform policies.

We use third-party analytics tools (e.g., Google Analytics, Meta Business Suite) to monitor website and social media performance. These tools may use cookies to track browsing behaviour. You can manage or disable cookies via your browser settings.

6. Your Rights Under UK GDPR

Under UK GDPR, you have the right to:

Access your personal data and request a copy.
Request corrections to any inaccurate or incomplete data.
Withdraw consent for marketing or photo use at any time.
Request deletion of your personal data when no longer required.
Restrict processing of your data under certain conditions.
Object to the processing of your data for specific purposes.

To exercise any of these rights, please contact us at ElegantTheory@outlook.com.

7. Data Retention

We retain client data for as long as necessary to fulfill treatment, legal, and regulatory obligations. Medical records are typically kept for a minimum of 7 years in accordance with professional healthcare standards.

8. Third-Party Sharing

We do not sell or rent your data. However, we may share data with:

Regulatory bodies if legally required (e.g., insurance, compliance audits).
IT service providers who maintain our secure booking systems.
Social media and advertising platforms (e.g., Meta, Google) to run targeted ads based on user interactions.

All third parties are required to comply with strict confidentiality and data protection standards.

9. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. Any updates will be posted on our website, and where appropriate, we will notify you directly.

10. Contact Information

If you have any questions about this Privacy Policy or your data rights, please contact us at:

Email: ElegantTheory@outlook.com
Address: 8 Bronson Road, London, SW20 8DY

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.