Last Updated: March 24, 2025

1. Introduction

Welcome to AQV Aesthetics' legal page. This document outlines our commitment to protecting your privacy and personal data while providing aesthetic services. Please read this information carefully to understand our policies and practices regarding your personal information.

2. Data Protection and GDPR Compliance

We comply with the General Data Protection Regulation (GDPR) and are committed to protecting your personal data. As a data controller, we process personal information lawfully, fairly, and transparently.

2.1 Data We Collect

• Personal identification information (name, address, email)
• Medical history relevant to aesthetic treatments
• Treatment records and photographs (with explicit consent)
• Payment information
• Communication preferences

2.2 Legal Basis for Processing

We process your data under the following legal bases:

• Explicit consent for medical information and treatment
• Contract fulfillment for service delivery
• Legal obligations for medical records
• Legitimate business interests

3. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Request data correction
• Request data deletion
• Withdraw consent
• Data portability
• Object to processing
• Lodge a complaint with a supervisory authority

4. Consent and Medical Information

4.1 Treatment Consent

Before any aesthetic treatment, we require:

• Written informed consent
• Medical history disclosure
• Acknowledgment of risks and potential outcomes
• Photography consent (if applicable)

4.2 Marketing Consent

We separately obtain explicit consent for:

• Email marketing communications
• SMS notifications
• Before/after photography usage
• Testimonial sharing

5. Data Security

We implement appropriate technical and organizational measures to ensure data security, including:

• Encrypted data storage
• Secure server infrastructure
• Regular security audits
• Staff training on data protection
• Restricted access protocols

6. Third-Party Processing

We may share your data with:

• Payment processors
• Appointment scheduling systems
• Medical record software providers
• Marketing service providers (with consent)

All third-party processors are GDPR-compliant and bound by data processing agreements.

7. Data Retention

We retain personal data for:

• Medical records: As required by law
• Financial records: 7 years
• Marketing preferences: Until consent withdrawal

8. Website Usage

8.1 Cookies

Our website uses cookies to:

• Improve user experience
• Analyse website traffic
• Remember your preferences
• Enable secure log-in

8.2 Online Booking

When booking appointments online:

• Data is transmitted securely
• Payment information is processed by certified providers
• Appointment confirmations are sent automatically

9. Contact Information

For privacy-related inquiries:

• Data Protection Officer: r.williamson@aqv-aesthetics.co.uk
• Phone: 01883 415565

10. Updates to This Policy

We reserve the right to update this policy. Changes will be:

• Posted on this page
• Notified via email for significant updates
• Effective immediately upon posting

11. Complaints Procedure

If you have concerns about data handling:

1. Contact our Data Protection Officer
2. We will investigate within 30 days
3. You may escalate to the Information Commissioner's Office

By using our services, you acknowledge this policy and consent to the practices described herein.