Privacy Policy
This policy explains what personal and clinical information Elevate Aesthetics collects, how it is used, who it may be shared with, and the rights you have over your data.
Placeholder content — requires review before launch. This page holds structural placeholder wording only. Final policy wording must be reviewed and approved before the website goes live. Last reviewed: [DATE TO CONFIRM].
Who We Are
Elevate Aesthetics is an independent clinic based in Andover, Hampshire, providing facial aesthetics consultations and structured hair restoration programmes. [PLACEHOLDER: Confirm the registered data controller name and, if applicable, ICO registration number.]
Data We Collect
We may collect your name, contact details, appointment history, relevant medical history, consultation notes and information submitted through our booking system or contact form. [PLACEHOLDER: Confirm the full list of data fields collected via Pabau and the website contact form.]
Clinical Records and Photography Consent
Where photography is taken to assess progress or support your treatment plan, this is only done with your specific, informed consent. Clinical photographs and records are stored securely and used only for the purposes explained to you at the time of consent. [PLACEHOLDER: Confirm the storage system and consent withdrawal process.]
Lawful Basis for Processing
We process personal and special category (health) data on the basis of your explicit consent, to perform our contract with you (delivering booked consultations and treatment), and, where relevant, to comply with our legal and professional obligations. [PLACEHOLDER: Confirm the specific lawful bases relied on for each processing activity.]
How We Use Your Data
Your information is used to manage appointments, provide safe and appropriate consultations and treatment, maintain accurate clinical records, respond to enquiries and, where you have agreed, to send appointment reminders or marketing communications.
Data Retention
We retain clinical records for [PLACEHOLDER: RETENTION PERIOD, e.g. in line with applicable professional guidance] and other personal data for no longer than is necessary for the purposes it was collected.
Your Rights
You have the right to access, correct, erase or restrict the use of your personal data, to object to certain processing and to data portability, subject to applicable exemptions. To exercise these rights, contact us at [EMAIL ADDRESS].
Contact and Complaints
If you have any questions about this policy or how your data is handled, contact us at [EMAIL ADDRESS]. If you remain concerned, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.