Who are we?
Better You Medical Aesthetics + Skin Clinic (“BU Aesthetics™”) is the Data Controller for the purposes of UK GDPR and the Data Protection Act 2018.
For privacy queries, you can contact us at info@buaesthetics.co.uk. Other contact details are available on our website.
What’s the point of this policy?
It tells you what to expect when we collect your personal information via our website or otherwise. Please only use our service if you are completely happy with this policy.
Generally, the policy covers only information provided to us. If you give personal information to other people, such as payment providers or other websites, please check their privacy policies.
Medical Information
As part of providing treatments and consultations, we collect health information including medical history, medications, allergies, treatment records, consultation notes, photographs and consent forms.
We collect this information to provide safe and appropriate care and to meet our legal and professional obligations as healthcare providers.
Legal Basis for Medical Data
Special Category Data
We process health information because it is necessary for the provision of healthcare and treatment, patient safety, safeguarding, insurance requirements, regulatory compliance and the establishment, exercise or defence of legal claims.
Clinical photographs may be taken before, during and after treatment. These form part of your medical record and are used for treatment planning, monitoring progress and documenting outcomes. Separate consent will always be obtained before any image is used for marketing purposes.
With your consent, we may share relevant information with your GP or other healthcare professionals where this is considered necessary for your care. In exceptional circumstances, information may be shared without consent where there is a legal obligation or safeguarding concern.
Might the policy change?
Yes. Please check it whenever you visit our website. We will assume you agree to the new version of the policy if you use the site after its effective date.
What do we collect?
Information which you upload to our service or otherwise give us such as:
- your name and contact details
- other information you provide on registration or otherwise
- details about your transactions with us
- information submitted through enquiry forms, bookings or consultations
- contact information used for newsletters or other marketing
Medical and health information including:
- medical history
- medications
- allergies
- treatment records
- consultation notes
- consent forms
- clinical photographs
Automated information about your use of our website such as:
- internet protocol (IP) address
- browser type and version
- device information
- operating system and platform
- mobile network information
- login information
- referral website information
- pages visited and actions taken on the website
Information provided by other people:
- limited billing information supplied by payment providers for verification purposes
What’s our reason / legal basis for collecting the information?
Because it’s necessary to enter into or perform a contract with you
This applies to enquiries, bookings, consultations, treatment records, contact information and transaction details.
Because it’s necessary for healthcare provision
This applies to medical information processed for the purposes of assessing suitability for treatment, providing treatment safely, maintaining clinical records and meeting professional obligations.
Because it’s in our legitimate interests
For example, to manage and improve our services, monitor website performance, prevent fraud and abuse, and conduct customer satisfaction surveys.
Because you have given consent
This applies to marketing communications, newsletter subscriptions and any use of clinical photographs for marketing purposes.
You may withdraw consent at any time by contacting us using the details above.
How long do we keep personal information?
Until our contract with you has ended.
Patient records are retained in accordance with legal, regulatory and professional requirements. Clinical records will normally be retained for a minimum of 8 years following the last entry in your medical record.
We will keep marketing information until you ask us to stop.
We will generally keep automated browsing information for up to 26 months.
Who do we share your personal information with?
We may share information with:
- service providers such as website hosts, payment providers, communication platforms and analytics providers
- healthcare professionals involved in your care where appropriate and with your consent
- regulators, professional bodies and law enforcement agencies where required by law
- insurers and professional advisers in connection with legal matters
- potential buyers in the event of a sale, merger or restructuring of the business
Do we send your information outside the UK?
Your personal information is primarily stored within the United Kingdom.
In some circumstances information may be transferred:
- within the European Economic Area (EEA)
- to service providers located in the United States, including Google, for analytics and website services
Where transfers occur, appropriate safeguards are implemented including standard contractual clauses where required.
What rights do you have?
Subject to applicable law, you may have the right to:
- access your personal information
- correct inaccurate information
- request deletion of your information
- restrict processing of your information
- request transfer of your information
- object to certain processing activities
- withdraw consent where processing is based on consent
If you have concerns about how your information is handled, please contact us using the details above.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office.
For more information visit www.ico.org.uk.
What about cookies?
We and third parties use cookies and similar technologies on our website.
Cookies are small text files stored on your device that help websites function correctly and improve user experience.
Cookies may be:
- session cookies which are temporary
- persistent cookies which remain on your device for longer periods
You can manage or delete cookies through your browser settings. Please note that disabling cookies may affect website functionality.
Types of cookies we use
| Type of cookie | Purpose |
|---|---|
| Logged-in status | Check if you are logged in |
| Remember me | Speed up login on return visits |
| Authentication | Help you move through the site securely |
| Security | Protect against fraudulent activity |
| Cookie notice | Store your cookie preferences |
Third-party cookies
Service providers may also place cookies on your device.
Analytics cookies
Used to understand how visitors use the site and improve performance.
Provided by Google Analytics.
Advertising cookies
Used to personalise ads, measure effectiveness and limit repeated ads.
Provided by Google (including AdSense and DoubleClick).
For more information and to opt out, refer to:
- Google Analytics data practices
- Google advertising and cookie policies
- Google partners data usage