Privacy Policy

Patient Privacy Notice

Last Updated: July 2026

Our Commitment to Your Privacy

At Aesthetic Health, we are committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

As a doctor-only medical aesthetics clinic regulated by the Care Quality Commission (CQC), we collect and process personal information to provide safe, effective and personalised healthcare, fulfil our legal and regulatory obligations, monitor treatment outcomes and continually improve the quality of the care we provide.

This Privacy Notice explains what information we collect, why we collect it, how we use it, who we may share it with and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Data Controller

Aesthetic Health Ltd

305 Harrogate Road

Leeds

LS17 6PA

Email: patientcare@aesthetichealth.co.uk

Website: www.aesthetichealth.co.uk

If you have any questions regarding this Privacy Notice or how we process your personal information, please contact us using the details above.

The Information We Collect

Depending on the services you receive, we may collect the following information.

Personal Information

• Name
• Date of birth
• Postal address
• Telephone number
• Email address
• Emergency contact details
• GP details (where appropriate)

Medical Information

To provide safe and appropriate healthcare, we may collect:

• Medical history
• Current and previous medical conditions
• Previous aesthetic treatments
• Surgical history
• Allergies
• Current medication
• Lifestyle factors relevant to treatment
• Clinical consultation notes
• Treatment plans
• Treatment records
• Consent documentation
• Prescribing information
• Follow-up reviews
• Aftercare records
• Complications or adverse events

Clinical Photography and Diagnostic Information

As part of your assessment and treatment, we may collect:

• Clinical photographs
• Before and after photographs
• VISIA® Skin Analysis
• VECTRA® imaging
• Ultrasound imaging
• Other clinically appropriate diagnostic images

These form part of your confidential medical record and help us assess your suitability for treatment, plan your care, monitor progress and evaluate treatment outcomes.

Treatment Outcome and Patient Experience Information

As part of our commitment to outstanding patient care and evidence-based practice, we may collect:

• Treatment outcome measures
• Patient Reported Outcome Measures (PROMs)
• Clinician Reported Outcome Measures (CROMs)
• Patient Experience Measures (PREMs)
• Patient satisfaction questionnaires
• Confidence and wellbeing measures
• Clinical observations
• Treatment review outcomes
• Quality assurance information
• Clinical audit data

Demographic Information

Where relevant, we may collect:

• Age
• Sex and/or gender
• Ethnicity
• Preferred language
• Accessibility requirements
• Occupation (where clinically relevant)

This information helps us provide personalised care, monitor equality of access, understand treatment outcomes across different patient groups and continually improve the quality of our services.

Why We Collect Your Information

We collect and process your information to:

• Provide safe and effective healthcare.
• Assess your suitability for treatment.
• Develop personalised treatment plans.
• Deliver treatments safely.
• Monitor your clinical progress and outcomes.
• Communicate with you regarding appointments and aftercare.
• Maintain accurate medical records.
• Meet our professional, legal and regulatory obligations.
• Comply with Care Quality Commission (CQC) requirements.
• Investigate complaints, incidents or adverse events where necessary.
• Monitor patient safety.
• Improve the quality of our services.
• Support evidence-based clinical practice.
• Conduct clinical governance, audit and service evaluation.

Our Lawful Basis for Processing

We process your personal information because it is necessary:

• to provide healthcare;
• for the management of healthcare services;
• to comply with our legal and regulatory obligations;
• for reasons of substantial public interest relating to healthcare;
• to establish, exercise or defend legal claims where necessary; and
• for our legitimate interests in maintaining patient safety, clinical governance and continuous service improvement.

Where we rely upon your consent (for example, marketing communications or the use of identifiable photographs outside your confidential medical record), you may withdraw your consent at any time.

Clinical Audit, Quality Improvement, Education and Research

Aesthetic Health is committed to delivering evidence-based, continually improving patient care.

To help us evaluate and improve the safety, quality and effectiveness of our treatments, we routinely analyse information collected during your care.

This may include:

• treatment outcomes;
• patient satisfaction;
• patient-reported outcome measures;
• clinical photographs;
• diagnostic imaging;
• confidence and wellbeing measures;
• demographic information;
• complication rates; and
• other information relevant to clinical governance and quality improvement.

Where appropriate, anonymised or pseudonymised information may be used for:

• clinical audit;
• quality assurance;
• service evaluation;
• professional education;
• conference presentations;
• scientific publications; and
• clinical research.

We will never publish or share information that could identify you, including identifiable photographs, videos or case studies, without first obtaining your explicit written consent.

Artificial Intelligence and Digital Technologies

We use secure electronic medical record systems and digital technologies to support the safe delivery of healthcare.

We may also use secure software tools, including those incorporating artificial intelligence (AI), to assist with administration, clinical governance, data analysis, quality improvement and service evaluation.

Artificial intelligence will not make independent clinical decisions regarding your care. All clinical decisions remain the responsibility of an appropriately qualified healthcare professional.

Who We May Share Your Information With

Where necessary, we may share your information with:

• members of your treating clinical team;
• pharmacies;
• laboratories;
• healthcare professionals involved in your care;
• secure software providers acting on our behalf;
• the Care Quality Commission (CQC);
• professional advisers and insurers where appropriate;
• law enforcement or regulatory authorities where we are legally required to do so.

We do not sell your personal information to third parties.

Marketing Communications

If you choose to receive marketing communications from us, we may contact you with information about new treatments, educational events, offers and clinic news.

You may withdraw your consent or unsubscribe at any time.

WhatsApp Communication

If you contact us via WhatsApp, your messages will also be processed by WhatsApp in accordance with their own Privacy Policy.

Information shared via WhatsApp will only be used to respond to your enquiry or support your ongoing care and will be incorporated into your patient record where clinically appropriate.

Cookies

Our website uses cookies to improve your browsing experience, understand website usage and enhance our online services.

Further information can be found in our Cookie Policy.

How Long We Keep Your Information

Medical records are retained in accordance with applicable legislation, professional guidance and the NHS Records Management Code of Practice.

Adult medical records are generally retained for a minimum of eight years following your last treatment, although longer retention periods may apply where required by law or professional guidance.

Keeping Your Information Secure

Protecting your information is extremely important to us.

We have appropriate physical, electronic and organisational security measures in place to safeguard your personal information against unauthorised access, disclosure, alteration or loss.

Access to patient information is restricted to authorised members of our team who require it to perform their professional duties.

Your Rights

Under UK GDPR you have the right to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information where applicable.
• Request restriction of processing.
• Object to certain processing activities.
• Request data portability where applicable.
• Withdraw consent where consent is relied upon.
• Lodge a complaint with the Information Commissioner’s Office (ICO).

If you wish to exercise any of these rights, please contact us.

Contact Us

If you have any questions about this Privacy Notice or how we process your personal information, please contact:

Aesthetic Health Ltd

305 Harrogate Road

Leeds

LS17 6PA

Email: patientcare@aesthetichealth.co.uk

If you remain dissatisfied, you also have the right to complain to the Information Commissioner’s Office (ICO):

www.ico.org.uk

Telephone: 0303 123 1113

Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legislation, technology, clinical practice or the services we provide.

The most up-to-date version will always be available on our website and may also be provided to you upon request.