Privacy Policy

Effective Date: 01 May 2025
Review Date: 30 April 2026

Gwen Inglis Aesthetics is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect your information when you use our services or website.

1. Who We Are

Gwen Inglis Aesthetics
1 St Colme Street
Edinburgh, EH3 6AA
📞 07982 899094
✉️ gweninglisaesthetics@gmail.com

For the purposes of data protection law, Gwen Inglis Aesthetics is the data controller of your personal information.

2. What Information We Collect

We may collect and process the following data:

Personal Information

  • Name

  • Date of birth

  • Address

  • Contact details (phone number, email)

Medical Information (Special Category Data)

  • Medical history

  • Medications

  • Allergies

  • Treatment records

  • Photographs (where consent is given)

Website Data

  • IP address

  • Browser type and usage data (via cookies)

3. How We Use Your Information

We use your data to:

  • Provide safe and appropriate treatments

  • Maintain accurate medical records

  • Communicate with you about appointments and aftercare

  • Process payments

  • Meet legal and regulatory obligations

  • Improve our services

4. Legal Basis for Processing

We process your data under the following lawful bases:

  • Consent – for treatment, photos, and marketing

  • Contract – to provide booked services

  • Legal obligation – to comply with healthcare regulations

  • Legitimate interests – to operate and improve our service

For medical data, we process under healthcare provision purposes in accordance with UK GDPR.

5. How We Store Your Data

  • Your data is stored securely in password-protected systems

  • Paper records (if used) are kept in locked storage

  • Access is restricted to authorised personnel only

6. How Long We Keep Your Data

We retain your records in line with professional and insurance requirements:

  • Adult records: typically 7 years after last treatment

  • Longer where required for legal or insurance purposes

7. Sharing Your Information

We will not share your data without your consent, except where necessary:

  • With other healthcare professionals involved in your care

  • With regulators (e.g. Healthcare Improvement Scotland) if required

  • With insurers or legal advisors if necessary

  • Where required by law

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion (where appropriate)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

To exercise your rights, please contact us using the details above.

9. Marketing

  • We will only send marketing communications if you have opted in

  • You can withdraw consent at any time by contacting us or using unsubscribe options

10. Cookies

Our website may use cookies to improve your browsing experience.

Cookies may collect:

  • Website usage data

  • Preferences and settings

You can control or disable cookies through your browser settings.

11. Data Security

We take appropriate measures to protect your data, including:

  • Secure digital systems

  • Password protection

  • Limited access controls

12. Complaints

If you are unhappy with how your data is handled, please contact us first so we can resolve the issue.

You also have the right to complain to the:

Information Commissioner's Office (ICO)
Website: https://www.ico.org.uk

13. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

14. Contact

If you have any questions about this policy or your data:

Gwen Inglis Aesthetics
📍 1 St Colme Street, Edinburgh, EH3 6AA
📞 07982 899094
✉️ gweninglisaesthetics@gmail.com

Your privacy matters to us.
If you have any questions about how your data is used, please get in touch.