Privacy Policy – Dermaline Aesthetics

Last updated: 22/11/2025

At Dermaline Aesthetics, we are committed to protecting your personal information and respecting your privacy. This policy explains what data we collect, how we use it, how we store it, and the rights you have under UK data protection law (UK GDPR and the Data Protection Act 2018).

If you have any questions, please contact us at:
info@dermalineaesthetics.co.uk

1. Who We Are

Dermaline Aesthetics is a nurse-led medical aesthetics clinic based in Berkhamsted, Hertfordshire.

Data Controller:
Dermaline Aesthetics
Berkhamsted, Hertfordshire, UK
Email: info@dermalineaesthetics.co.uk

2. Personal Data We Collect

We may collect the following information when you use our website, contact us, or attend the clinic:

Information you provide directly

• Name
• Email address
• Phone number
• Date of birth
• Medical history (provided as part of aesthetic consultations and treatments)
• Treatment notes and consent forms
• Payment information (processed securely by third-party providers)
• Messages sent via online forms, email, or social media

Information collected automatically

• IP address
• Browser type and device information
• Website usage data via cookies (see Cookie Policy if you have one)

Information from third parties

• Mailchimp (newsletter and SMS subscriptions)
• Booking systems (e.g., Timely)
• Payment processors (e.g., Stripe)

3. How We Use Your Information

We process data only where lawful and necessary, including:

For clinical care

• Booking and managing appointments
• Conducting consultations and treatments
• Maintaining accurate medical records
• Providing aftercare and follow-up support

For communication

• Appointment reminders
• Service updates
• Responding to enquiries
• Optional email and SMS marketing (only with your consent)

For business operations

• Payment processing
• Internal auditing and governance
• Compliance with regulatory or legal obligations
• Improving our website and services

We do not sell or share your data with third-party marketers.

4. Marketing Communications

If you opt in, we may send:

• Email newsletters
• SMS updates
• Appointment or service information
• Special offers or clinic announcements

You can withdraw consent at any time by:

• Clicking “unsubscribe” in any email
• Replying STOP to SMS
• Contacting us at info@dermalineaesthetics.co.uk
• Updating your preferences via Mailchimp’s “update your profile” link

5. Legal Basis for Processing

Under UK GDPR, we process your data on the following grounds:

• Consent – for marketing communications and optional data you choose to share
• Legitimate interests – for general enquiries, reminders, and operational clinic needs
• Legal obligation – maintaining medical records
• Contract – providing treatments you have purchased
• Vital interests – rare cases involving safety or adverse events

6. How We Store and Protect Your Data

We take data security seriously. Your information is stored securely on:

• Encrypted clinic software
• GDPR-compliant booking and email systems
• Secure devices with password protection

Medical records are stored according to healthcare industry standards and required retention periods.

7. How Long We Keep Your Data

We only keep your data for as long as necessary for clinical, legal, or operational purposes.

Typical retention periods:

• Medical/aesthetic records: 7 years (or longer if legally required)
• General enquiries: up to 12 months
• Marketing data: until you unsubscribe
• Financial records: 6 years

8. Sharing Your Information

We only share data with trusted third-party providers who help us run the clinic, including:

• Mailchimp (email/SMS communications)
• Stripe (payment processing)
• Timely (booking system)
• Secure medical record software
• Labs or pharmacies where clinically necessary

All providers are GDPR-compliant and process data on our behalf.

We do not share your data outside the UK unless adequate protection is in place.

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Withdraw consent at any time
• Object to certain processing
• Request transfer of your data
• Restrict how your data is used
• Complain to the ICO

ICO website: https://ico.org.uk

If you wish to exercise any rights, email us at info@dermalineaesthetics.co.uk.

10. Cookies

If your website uses cookies (analytics, booking widgets, etc.), include a Cookie Policy or link to your plugin’s cookie settings.

If you want, I can create a Cookie Policy next.

11. Changes to This Policy

We may update this policy occasionally to reflect changes in legislation or clinic practices. Updates will be published on this page with a revised date.