Privacy Policy
This Privacy Policy explains how The Aesthetics Nurse (operating in Coatbridge, North Lanarkshire) collects, uses, and protects your personal information when you visit our website, book a consultation or treatment, or enrol on a training course with us.
1. Who We Are
The Aesthetics Nurse is a nurse-led private aesthetics clinic and training academy based in Coatbridge, North Lanarkshire. For the purposes of data protection law, we are the data controller of the personal information you provide to us. [Placeholder — registered business name, company number (if applicable), and ICO registration number to be confirmed by the clinic.]
2. Information We Collect
We may collect the following categories of information: contact details (name, email address, telephone number, postal address); booking and appointment information; health and medical information relevant to your treatment or consultation, which you provide voluntarily as part of a consultation or medical history form; payment and billing information (processed via our payment provider — we do not store full card details); course enrolment and training records; and technical information about how you use our website (such as IP address, browser type, and pages visited), collected via cookies — see our Cookie Policy for details.
3. How We Use Your Information
We use your information to: respond to enquiries and arrange consultations, appointments, and training bookings; provide safe and appropriate aesthetic treatments, including assessing medical suitability; process payments and deposits; send appointment reminders and important updates about your treatment or course; maintain accurate clinical records as required by our professional and regulatory obligations; and, where you have given consent, send you marketing communications about treatments, offers, or courses. You may opt out of marketing communications at any time.
4. Legal Basis for Processing
We process your personal information on the following legal bases under UK GDPR: performance of a contract (to provide the treatment, consultation, or course you have booked); consent (for marketing communications and, where relevant, before and after photographs); legal obligation (to maintain clinical records as required by our professional regulator); and legitimate interests (to run and improve our business, including website analytics). Special category data (such as health information) is processed on the basis of the provision of healthcare and with your explicit consent.
5. Sharing Your Information
We do not sell your personal information. We may share your information with trusted third parties where necessary, including payment processors, appointment and booking software providers, our insurance provider [Placeholder — named insurer to be confirmed], and regulatory bodies where we are legally required to do so. We do not share your medical information with any third party without your consent, except where required by law.
6. Data Retention
We retain clinical records in line with professional and regulatory guidance for healthcare practitioners [Placeholder — specific retention period to be confirmed by the clinic, typically a minimum of 8–10 years for adult clinical records]. Other personal data, such as marketing preferences, is retained only for as long as necessary for the purposes it was collected.
7. Your Rights
Under UK data protection law, you have the right to: request access to the personal information we hold about you; request correction of inaccurate information; request erasure of your information, where applicable; object to or restrict certain processing; request that your data be provided in a portable format; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
8. Cookies
Our website uses cookies and similar technologies to improve your browsing experience and understand how visitors use our site. Full details are set out in our separate Cookie Policy.
9. Security
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Clinical and personal records are stored securely and access is restricted to authorised staff only.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: [Placeholder — clinic contact email and postal address to be confirmed]. This policy was last reviewed on [Placeholder — date].