Privacy Policy

Privacy Notice
The Gorgeous Clinic
Last updated: 13/12/2025

---

1. Who we are
We are The Gorgeous Clinic, located at 221 Whitegate Drive, Blackpool, FY3 9HW, United Kingdom.
In this privacy notice we refer to ourselves as “we”, “us” or “our”.
You can contact us in the following ways:

• Telephone: 01253 928029
  
• Email: [email protected]
  
• Post: 221 Whitegate Drive, Blackpool, FY3 9HW, United Kingdom
  

We take your privacy and the security of your personal information extremely seriously. This privacy notice explains how we collect, use, store and protect your personal information, and your rights under UK data protection law.
We have appointed Adam as our Data Protection Officer. You can contact him using the details above.
We may update this privacy notice from time to time. The most recent version will always be available on our website.

---

2. Key definitions

• Personal Information: Any information that can identify a living individual.
  
• Special Category Data: More sensitive personal information that requires additional protection under UK GDPR, such as health data.
  
• Data Controller: The organisation responsible for deciding how and why personal information is processed.
  
• Data Processor: A third party that processes personal information on behalf of the Data Controller.
  

---

3. Personal information we collect
We may collect, use and store the following categories of personal information:
Identity Information

• Name
  
• Date of birth
  
• Gender
  

Contact Information

• Address
  
• Email address
  
• Telephone number
  

Appointment & Treatment Information

• Appointment history
  
• Consultation notes
  
• Treatment records
  
• Before-and-after photographs (where applicable)
  

Payment & Transaction Information

• Payment method details
  
• Transaction history (amounts and dates)
  

Marketing Preferences

• Communication preferences
  
• Consent records
  

Website & Technical Information

• IP address
  
• Browser type and version
  
• Device information
  
• Website usage data (via cookies and analytics tools)
  

The personal information we collect will vary depending on your relationship with us (for example, website visitor, consultation client, or treatment client).

---

4. Special category data
As a medical aesthetics clinic, we process health-related personal information, which is classified as special category data under UK GDPR.
This may include:

• Medical history relevant to treatment
  
• Skin type and condition
  
• Treatment outcomes
  
• Clinical photographs
  

We only process this information:

• with your explicit consent, and/or
  
• where necessary for the provision of medical or aesthetic care.
  

We do not process criminal conviction data.

---

5. How and why we use your personal information
We only process your personal information where there is a lawful basis to do so. These include:

• Contract: To provide consultations, treatments, and related services.
  
• Legitimate Interests: To operate and improve our clinic, ensure safety, and manage our business.
  
• Legal Obligation: To comply with regulatory, accounting, and medical record-keeping requirements.
  
• Consent: Where you have given clear permission, such as for marketing or photography.
  

Common purposes include:

• Booking and managing appointments
  
• Providing consultations and treatments
  
• Maintaining accurate medical records
  
• Processing payments
  
• Client communication
  
• Quality assurance and training
  
• Website analytics and performance
  
• Marketing communications (where consented)
  

If you do not provide required personal information, we may be unable to provide certain services.

---

6. CCTV & client safety
For safety, quality assurance, and staff protection, CCTV is in operation throughout The Gorgeous Clinic, including reception, consultation rooms, and treatment areas.
CCTV footage:

• is recorded under our legitimate interests
  
• is clearly signposted within the clinic
  
• is stored securely
  
• is accessed only when necessary (e.g. complaints, incidents, legal matters)
  

Footage may be disclosed to legal advisors, insurers, regulators, or law enforcement where required.

---

7. How we collect personal information
We collect personal information:

• directly from you (forms, consultations, bookings, communication)
  
• via our website (cookies and analytics)
  
• through payment providers
  
• through clinical photography (with consent)
  

---

8. Who we share personal information with
We may share personal information with trusted third parties where necessary, including:

• payment providers
  
• IT and website service providers
  
• marketing platforms (where consented)
  
• professional advisers (legal, accounting, insurance)
  
• regulatory bodies where required by law
  

All third parties are required to handle your personal information securely and lawfully.
We do not sell or trade your personal information.

---

9. International data transfers
Where personal information is transferred outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with UK GDPR.

---

10. How long we keep your information
We retain personal information only for as long as necessary:

• to provide services
  
• to meet medical, legal, and regulatory requirements
  
• to resolve disputes or claims
  

Medical records are retained in accordance with professional and legal guidance.

---

11. Your rights
Under UK data protection law, you have the right to:

• access your personal information
  
• request correction of inaccurate data
  
• request erasure (in certain circumstances)
  
• restrict processing
  
• data portability
  
• object to processing, including marketing
  
• withdraw consent at any time (where consent is the legal basis)
  

To exercise your rights, contact us using the details above. We may need to verify your identity.

---

12. Marketing communications
We may contact you about our services where:

• you have consented, or
  
• we have a lawful legitimate interest
  

You can opt out at any time via unsubscribe links or by contacting us directly.
We do not share your data with third parties for marketing.

---

13. Complaints
If you are unhappy with how we handle your personal information, please contact us first so we can resolve the issue.
You also have the right to complain to the Information Commissioner’s Office (ICO):

• www.ico.org.uk
  

---

14. Third-party websites
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy notices separately.