Who is responsible for your information
The data controller is Lisa Nottage trading as LN Medical Aesthetics.
Privacy enquiries and data-rights requests can be sent to lnmedicalaesthetics@gmail.com.
Information collected and why it is used
Information may include contact and booking details, medical information relevant to consultation or treatment, consent, clinical records, clinical photographs, aftercare communications, payment records and correspondence. When the website is visited, technical information such as an IP address, browser or device details, requested pages, timestamps and security events may also be processed.
It is used to administer bookings and treatment, assess clinical suitability, maintain clinical and financial records, provide aftercare, respond to concerns or complaints, protect the website and business, and meet professional and legal obligations.
This website does not contain contact forms, medical-history forms, analytics, advertising trackers or third-party embeds. It does not collect clinical information directly.
How information is handled
The following providers support the clinic's current operations:
- Faces for bookings, contact details, medical information, consent, clinical records, clinical photographs, aftercare information and deposits.
- Stripe through Faces for online deposit payments.
- Cloudflare for DNS, website hosting, website security and technical access information.
- Google and Gmail for business correspondence.
- Monzo Business for applicable banking or in-person transactions.
- Facebook, Instagram and TikTok for social-media pages and messages.
- GitHub for website source code only. Client and clinical information should not be stored there.
LN Medical Aesthetics does not store complete card details. Payment providers process payment information under their own terms and privacy information.
Some general technology providers may process information outside the United Kingdom. Where this occurs, the provider must use an appropriate legal safeguard for the transfer.
Sharing health information safely
Do not send medical histories, clinical photographs or detailed health information through ordinary email or social-media messages. Use Faces when Lisa asks you to provide information for your consultation, clinical record or aftercare.
Lawful reasons for using information
- Contract and steps requested before entering a contract, including booking and treatment administration.
- Legal obligations, including tax and record-keeping requirements.
- Legitimate interests, including website security, service administration and handling claims.
- Consent for optional marketing.
- Explicit consent where optional marketing material reveals health information.
Health information used for assessment, treatment and clinical records is handled where necessary for health care or treatment under Article 9(2)(h). Information may also be retained or used for establishing, exercising or defending legal claims under Article 9(2)(f) where applicable.
Clinical photographs and marketing
Clinical photographs are retained for 10 years from the date they are taken.
Photographs held as part of a clinical record are separate from photographs used for marketing. Marketing use requires separate consent, is not a condition of treatment and can be withdrawn without affecting care.
Marketing photographs, video and testimonials are kept until consent is withdrawn or the agreed use ends, subject to retaining a minimal record of the consent decision where necessary.
A request for deletion does not automatically override applicable professional, legal or insurance retention requirements.
Other retention periods
Other personal and clinical records are retained only for as long as necessary for the purpose for which they were collected and to meet applicable professional, legal, insurance, tax and claims-handling obligations. Retention periods are reviewed periodically.
Your data rights
Depending on the circumstances, you may have rights to ask for access to your personal information, correction of inaccurate information, restriction or objection to some uses, deletion where applicable, and a copy of information you provided in a portable format.
You may withdraw consent for optional marketing at any time. This does not affect processing that took place before consent was withdrawn or information that must be retained for another valid reason.
If you are dissatisfied with how your information is handled, you can complain to the Information Commissioner's Office through the ICO complaints service.
Privacy enquiries and requests
Contact LN Medical Aesthetics by email or post to make a privacy enquiry or exercise a data right.