Privacy Policy

1. Who We Are

BBY London Clinic (“we”, “us”, “our”) is the data controller responsible for your personal data. We are a beauty clinic based in London, United Kingdom.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at: info@bbylondonclinic.com or +44 7880 841420.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data — first name, last name, date of birth
• Contact Data — home address, email address, telephone numbers
• Health Data (Special Category) — medical history, skin type, allergies, contraindications, and other health information necessary for the safe delivery of our treatments
• Transaction Data — details of payments and services you have purchased
• Marketing & Communications Data — your preferences for receiving marketing from us
• Technical Data — IP address, browser type and version, and pages visited on our website (collected automatically via cookies)

We do not knowingly collect data from children under 18.

3. How We Collect Your Data

We collect data through the following means:

• Direct interactions — when you fill in our contact or booking forms, speak to us by phone, attend a consultation, or correspond with us by email
• Automated technologies — as you interact with our website, we may automatically collect technical data about your device and browsing actions via cookies and similar technologies
• Third parties — we may receive data from booking system providers, payment processors, or analytics services

4. Legal Bases for Processing Your Data

We only process your personal data where we have a lawful basis to do so under UK GDPR. The legal bases we rely on are:

• Contract — processing is necessary to deliver the services you have booked with us
• Consent — where you have given clear, explicit consent (e.g. to receive marketing emails, or for us to process your health data for treatment purposes)
• Legitimate Interests — where necessary for our legitimate business interests, provided these are not overridden by your rights (e.g. maintaining business records, preventing fraud)
• Legal Obligation — where we are required to process your data to comply with the law (e.g. HMRC financial record requirements)

For health data (special category data), we rely on your explicit written consent, obtained via our client intake forms before any treatment begins.

5. How We Use Your Data

We use your personal data to:

• Process and manage your bookings and appointments
• Deliver safe and appropriate treatments based on your health information
• Send appointment reminders and post-treatment follow-ups
• Process payments and maintain financial records
• Send marketing communications about our treatments and offers (where you have consented)
• Improve our services and website
• Comply with legal and regulatory obligations

You may opt out of marketing communications at any time by contacting us or clicking “unsubscribe” in any marketing email.

6. How Long We Keep Your Data

• Client records (including health data): 7 years from your last appointment
• Financial and transaction records: 6 years, as required by HMRC
• Marketing data: until you withdraw consent or opt out
• Website technical data: up to 26 months

After these periods, your data is securely deleted or anonymised.

7. Who We Share Your Data With

We do not sell your personal data. We may share it with trusted third-party service providers, including:

• Booking and appointment management software
• Payment processing providers
• Email marketing platforms (where you have consented to marketing)
• IT service and website hosting providers
• Professional advisers (accountants, solicitors) bound by confidentiality

All third parties are required to handle your data in accordance with UK data protection law. We may also disclose data where required by law or to protect the safety of our clients or staff.

8. Data Security

We have put appropriate technical and organisational measures in place to prevent your personal data from being accidentally lost, accessed without authorisation, altered, or disclosed. Access to your personal data is restricted to those with a genuine business need to know.

In the event of a data breach that is likely to affect your rights, we will notify you and the Information Commissioner’s Office (ICO) as required by law.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access — request a copy of the data we hold about you (a Subject Access Request)
• Right to Rectification — request correction of inaccurate or incomplete data
• Right to Erasure (“Right to be Forgotten”) — request deletion of your data in certain circumstances
• Right to Restrict Processing — request that we pause processing of your data
• Right to Data Portability — request your data in a structured, machine-readable format
• Right to Object — object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent — where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at info@bbylondonclinic.com. We will respond within one calendar month. There is no charge for exercising your rights.

10. Cookies

Our website uses cookies to improve your experience. Please see our Cookie Policy for full details on the cookies we use and how to manage them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

12. How to Complain

If you are unhappy with how we have handled your personal data, please contact us first and we will do our best to resolve the matter. You also have the right to lodge a complaint directly with the UK data protection regulator:

Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

13. Contact Us

For any data protection queries:
BBY London Clinic
Email: info@bbylondonclinic.com
Phone: +44 7880 841420