PRIVACY POLICY

1. Who we are

SG Aesthetics provides non-surgical medical aesthetic treatments in Morpeth, Northumberland.

Our website address is https://sgaesthetics.co.uk.

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Sarah Gilmour / SG Aesthetics is responsible for the personal information collected and used in connection with our website and services.

If you have any questions about this policy or how your personal information is handled, please contact us using the details provided on our Contact page.

2. What information we collect

The personal information we collect depends on how you interact with SG Aesthetics. It may include:

Contact enquiries: your name, email address, the subject of your enquiry and any information you include in your message.
Appointments and consultations: contact details, appointment information and, where relevant, medical history, health information, treatment preferences and clinical records.
Treatment and aftercare: information relating to treatments provided, clinical assessments, consent, photographs where taken, and relevant aftercare.
Membership: information required to administer The Skin Edit membership, including your chosen monthly contribution, account credit, treatment transactions and relevant payment administration details.
Website usage: technical information such as your IP address, browser type and information about how you use our website, where collected through server logs, cookies or similar technologies.

Please avoid including sensitive medical information in a general website enquiry. If we need further health information to assess your suitability for treatment, we will explain how to provide it appropriately.

3. How we use your information

We may use your personal information to:

Respond to enquiries and requests for information.
Arrange and manage appointments and consultations.
Assess treatment suitability, provide treatments and maintain appropriate clinical records.
Provide relevant treatment information, aftercare and follow-up communications.
Administer The Skin Edit membership, including monthly contributions, accumulated credit and member discounts.
Process payments and manage related financial records.
Operate, maintain and improve our website.
Protect our business, prevent misuse and meet applicable legal and regulatory obligations.

We only use personal information for purposes that are relevant to our relationship with you and permitted by applicable law.

4. Our lawful basis for using personal information

Data protection law requires us to have a lawful basis for processing personal information. Depending on the circumstances, this may include:

Contract: where information is needed to provide a service you have requested, administer a membership or take steps at your request before entering into an agreement.
Legal obligation: where we need to retain or disclose information to meet legal or regulatory requirements.
Legitimate interests: where we have a legitimate business or operational reason to use information and this does not override your rights and interests.
Consent: where we rely on your consent for a particular purpose, such as certain marketing communications or non-essential cookies.

Health information is subject to additional legal protections because it is special category personal data. Where we process health information, we must also meet an applicable condition under data protection law for handling this type of information.

The specific lawful basis and additional condition depend on the purpose and circumstances of the processing.

5. Medical and clinical information

To provide aesthetic treatments responsibly, we may need to collect and retain information about your health, medical history, treatment suitability and care.

This information is used only for appropriate purposes connected with your care and the administration of our services, subject to applicable data protection requirements.

We take the confidentiality of clinical information seriously and limit access to those who need it for legitimate purposes.

Please contact us if you have questions about how your clinical information is used or retained.

6. Who we share information with

We do not sell your personal information.

Where necessary for the operation of our business, we may share relevant information with trusted service providers, including:

Pabau: where used to manage appointments, client records, treatment credit, membership administration or related payments.
Payment providers and banks: where required to process payments or administer Direct Debit arrangements.
Website and IT providers: where needed to host, maintain, secure or support our website and associated systems.
Professional advisers and relevant authorities: where disclosure is necessary to meet legal obligations, obtain professional advice or protect our legal rights.

We only share information where appropriate and necessary. Service providers handling information on our behalf are expected to protect it and use it in accordance with applicable requirements.

Some providers may process information outside the UK. Where this occurs, appropriate safeguards will be required where applicable under data protection law.

7. How long we retain your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining clinical records, administering memberships, meeting legal obligations and resolving disputes.

Retention periods vary depending on the type of information and the circumstances. Clinical records may need to be retained for longer than general website enquiries.

When information is no longer required, we will securely delete it or otherwise dispose of it appropriately, subject to any applicable legal retention requirements.

8. Cookies and website technologies

Our website may use cookies and similar technologies to support essential website functionality, security and, where enabled, analytics or other features.

Some cookies are necessary for the website to operate. Other cookies, including non-essential analytics or marketing cookies where used, may require your consent.

You can manage your cookie preferences through the controls provided on the website, where available. You can also adjust your browser settings, although disabling certain cookies may affect website functionality.

Where third-party content or services are embedded in the website, those providers may collect information or use cookies in accordance with their own privacy practices.

9. Keeping your information secure

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No method of transmitting information over the internet or storing electronic information can be guaranteed to be completely secure. We take reasonable steps to protect the information entrusted to us and to limit access to authorised individuals.

10. Your data protection rights

Under applicable data protection law, you may have the right to:

Request access to the personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Request erasure of your information in certain circumstances.
Request that we restrict how we use your information in certain circumstances.
Object to certain types of processing.
Request a copy of information you have provided to us in a portable format, where the relevant legal conditions apply.
Withdraw consent where we rely on consent as the basis for processing.

These rights are subject to legal conditions and exceptions. For example, we may need to retain certain clinical or financial records to meet legal or professional obligations.

To exercise your rights, please contact us using the details on our Contact page. We may need to verify your identity before responding.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator, at https://ico.org.uk/.

11. Links to other websites

Our website may contain links to external websites or services. We are not responsible for the privacy practices or content of those websites.

We recommend reading the relevant privacy information when visiting an external website or using a third-party service.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, systems or legal obligations.

Any revised version will be published on this page with an updated revision date.

13. Contact us

If you have questions about this Privacy Policy or how SG Aesthetics handles your personal information, please contact us through our Contact page.