1. General​

• Dr AP Aesthetics & Wellbeing (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with UK GDPR and relevant data protection laws.

• By using our website or services, you consent to the terms outlined in this policy.

​

2. Information we collect

We may collect the following types of information:

a. Personal Information

• Name

• Address

• Email address

• Phone number

• Date of birth

• Medical history, relevant health information

• Treatment preferences and consultation notes

b. Technical/Data Information

• IP address

• Browser type

• Device information

• Website usage data (analytics, cookies etc.)

c. Booking & Payment Information

• Appointment details

• Payment confirmation (no card details are stored by us)

 

3. How we use your information

We use personal data to:

• Provide treatments and manage appointments

• Assess treatment suitability and ensure safety

• Contact you regarding bookings or clinical queries

• Send appointment reminders and essential updates

• Maintain accurate medical and treatment records

• Improve website functionality and user experience

• Comply with legal, regulatory, and insurance obligations

• We do not use your information for unsolicited marketing unless you have explicitly opted in.

 

4. Legal bases for processing

We process your data under one or more of the following lawful bases:

• Consent

• Performance of a contract (bookings, treatments)

• Legitimate interest

• Compliance with legal/medical obligations

 

5. Data storage and security

• Your data is stored securely using encrypted systems. We limit access to authorised clinical or administrative staff only.

• Medical records are retained for the legally required period in accordance with UK medical guidelines.

 

6. Sharing your information

We will never sell your data. We may share information only with:

• Insurance providers (if required)

• Payment processors

• Regulatory bodies (where legally necessary)

• All partners are GDPR-compliant.

 

7. Your rights

Under UK GDPR you have the right to:

• Access your data

• Request correction or deletion

• Restrict processing

• Withdraw consent

• Request a copy of your data

To exercise any of these rights, contact us at: drashaaesthetics@hotmail.com

 

8. Changes to This Policy

• We may update this policy from time to time. The latest version will always appear on this page.

 

​

​