Privacy Policy

Data Protection and Confidentiality Notice

SF Aesthetics and training academy

Under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), we process your personal data based on one or more of the following lawful grounds:

Your consent

Performance of a contract (i.e., delivering treatments or services you’ve booked)

Legal obligation (e.g. healthcare regulations)

Vital interests (e.g. medical emergencies)

Our legitimate interests

Tasks carried out in the public interest

At least one of these legal bases will apply whenever we process your data.

Why We Collect and Use Your Information

We use the personal information you provide to deliver high-quality aesthetic services and for related purposes, including

Maintaining accurate client and treatment records

Making appointments and sending confirmations/reminders

Providing treatment plans and aftercare advice

Ensuring medical safety and suitability of treatments

Meeting legal and insurance obligations

Internal performance monitoring and practice management

Our primary justification for data processing is to fulfill our contractual obligation to you when providing services.

Your Confidentiality and Sensitive Data

We owe a strict duty of confidentiality to all clients. In the course of providing aesthetic treatments, we may need to collect and process special category data (e.g., medical history, allergies, treatment responses), which we handle under Article 9(2)(h) of the UK GDPR — processing necessary for the provision of health care.

Your Rights Under Data Protection Law

You have the following rights regarding your personal data:

The right of access—to request a copy of data we hold about you

The right to rectification—to correct inaccurate or incomplete data

The right to erasure—to ask us to delete your data (subject to legal exceptions)

The right to restrict processing—to limit how we use your data

The right to object—to certain types of processing, such as marketing

The right to withdraw consent—at any time for data you have previously consented to

The right to complain—to the Information Commissioner’s Office (ICO)

Our Data Protection Principles

We comply with the data protection principles by ensuring that personal data:

Is processed lawfully, fairly, and transparently

Is collected for specific, legitimate purposes

Is limited to what is necessary

Is accurate and kept up to date

Is kept for no longer than necessary

Is processed with appropriate security and safeguards

Disclosures to Third Parties

We may share your data only where necessary for your care or where legally required. This may include:

Qualified medical professionals assisting in treatments

Booking or record-keeping systems (secure and GDPR-compliant)

Our insurers and legal advisors

Regulatory bodies or law enforcement, if required

We may also share information with marketing service providers if you’ve opted in to receive promotional updates. Any third party we engage is contractually obliged to protect your data.

Transfers Outside the UK/EEA

We do not transfer your personal data outside the United Kingdom or European Economic Area (EEA). If such a transfer becomes necessary, we will only do so with appropriate legal safeguards in place.

Retention of Data

We retain your data for seven years after your last appointment, as required by medical and insurance guidelines. This enables us to:

Ensure continuity of care

Address future medical queries

Comply with regulatory inspections

Respond to any future complaints or legal claims

Assessors and Accreditation

On occasion, external clinical or professional assessors may require access to anonymised client records as part of practice reviews or insurance audits. This is justified under our legitimate interest to maintain professional standards. If you object to your records being viewed, even anonymously, please notify us in writing.

Marketing and Communication Preferences

We may send occasional emails or texts about treatments, seasonal offers, or skincare advice. You can opt in or out at any time by emailing us or clicking “unsubscribe” on any promotional message.