Privacy Policy

Who we are

SVR Aesthetics is an aesthetic clinic located at Unit 2, Stainer Square Centre, Queensway, Bletchley, Milton Keynes, MK2 2FY. We are the data controller for the personal information described in this policy. You can contact us about privacy matters by email at svraesthetics@gmail.com or by phone on 077 92284575.

Information we collect

• Contact details you give us through our website forms, WhatsApp, email or phone — your name, phone number, email address and the treatment you are interested in.
• Consultation and treatment records — your medical history, medications, allergies, consent forms, treatment notes and clinical photographs. This is special category (health) data.
• Payment information — records of payments and booking fees (card details are processed by our payment provider and are not stored by us).
• Website usage data — pages visited, device type, approximate location and how you found us, collected through cookies and analytics tools (see Cookies below).
• Reviews and feedback you choose to leave, and any complaint correspondence.

How we use your information and our lawful basis

• To respond to enquiries and book, confirm and remind you of appointments — performance of a contract / steps taken at your request.
• To assess your suitability for treatment and deliver treatment safely — provision of health care, with your explicit consent for health data.
• To keep accurate clinical records as required by our professional and regulatory obligations — legal obligation and provision of health care.
• To take payments and keep financial records — performance of a contract and legal obligation.
• To improve our website and measure the effectiveness of our advertising (including Google Ads and Meta ads) — legitimate interests, and consent where cookies are used.
• To send you information about offers or treatments you have asked about — consent, which you can withdraw at any time by replying STOP or contacting us.

Who we share your information with

We never sell your personal information. We share it only where necessary with:

• Our email and booking service providers, who deliver form submissions and appointment communications to us.
• Your GP or other healthcare professionals, only with your consent or where required for your safety.
• Prescribing and pharmacy partners for prescription-only medicines.
• Payment processors for card payments.
• Analytics and advertising platforms (for example Google and Meta) in anonymised or pseudonymised form to measure our marketing.
• Regulators, insurers or legal advisers where we are required to do so by law or to defend a claim.

How long we keep your information

Clinical records are retained for at least 8 years from your last treatment (or until age 25 for anyone treated under 18, which we do not do), in line with NHS records management guidance and our insurer's requirements. Enquiry details for people who do not become clients are deleted within 12 months. Financial records are kept for 6 years as required by HMRC. Website analytics data is retained according to the settings of the tools we use, typically no longer than 26 months.

Cookies and analytics

Our website uses strictly necessary cookies to function, and — with your consent — analytics and advertising cookies from Google (Google Analytics, Google Ads) and Meta to understand how visitors use the site and to measure our advertising. You can manage or withdraw consent at any time through your browser settings or our cookie banner. Blocking cookies may affect some website features.

Your rights

Under UK GDPR you have the right to:

• Access the personal information we hold about you and receive a copy.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete your information, where we have no overriding legal or clinical obligation to keep it.
• Restrict or object to how we use your information, including for direct marketing.
• Withdraw consent at any time where we rely on consent.
• Receive your information in a portable format.

To exercise any of these rights, contact us using the details above. We will respond within one month. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Security

We keep your information secure using access controls, encrypted transmission on our website, and locked or password-protected clinical records. Only staff who need your information to provide your care can access it.

Children

We only treat clients aged 18 and over and do not knowingly collect information from anyone under 18.

Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date it was last reviewed.