Legal
Privacy Policy
This policy explains what personal information Victoria Wellness collects, how we use and protect it, and the rights you have over it.
1. Who we are
Victoria Wellness (“we”, “us”, “the clinic”) is the data controller for the personal information we hold about you. We are an aesthetics clinic at 154 Buckingham Palace Road, London, SW1W 9TR. For any question about your data, contact hello@victoriawellness.co.uk.
2. The information we collect
- Identity & contact details, name, email, phone and address.
- Health information, medical history, treatment records, consent forms and any before/after photos you provide. This is “special category” data.
- Booking & payment information, appointments, purchases and transaction records. Payments are handled by our providers; we do not store full card details.
- Marketing preferences.
- Technical data, device and usage information collected via cookies when you use our website.
3. How we collect it
We collect information directly from you when you book, consult, complete forms or contact us; automatically through cookies and analytics on our website; and through our online booking provider.
4. How we use it & our lawful bases
- To provide treatments and manage your care, performance of a contract and, for health data, your explicit consent and the provision of health care.
- To manage bookings, payments and records, contract and legal obligation.
- To keep our services safe and meet regulatory requirements, legal obligation and legitimate interests.
- To send marketing where you have agreed, consent.
5. Health (special category) data
Some information you give us is special category data. We only process it where you have given explicit consent, or where it is necessary for the provision of health care and treatment.
6. Sharing your information
We share data only where necessary: with service providers who help us run the clinic (such as our online booking and payment platforms), our professional advisers, and regulators or authorities where required by law. We do not sell your data.
7. Marketing
We only send marketing if you have opted in. You can unsubscribe at any time using the link in our emails or by contacting us.
8. Cookies & analytics
Our website uses cookies and similar technologies, including Google tools, to make the site work and to understand how it is used. You can control cookies through your browser settings.
9. How long we keep your data
We keep treatment and medical records for as long as required by our professional and legal obligations, and other information for no longer than necessary for the purposes above.
10. Keeping your data secure
We use appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access.
11. Your rights
- Access a copy of your data, correct inaccurate data, ask us to erase it, and restrict or object to processing.
- Data portability, and the right to withdraw consent at any time (this will not affect processing already carried out).
To exercise any right, contact hello@victoriawellness.co.uk.
12. International transfers
Where a provider processes data outside the UK, we ensure appropriate safeguards are in place as required by UK data protection law.
13. Children
Our services and website are intended for people aged 18 and over.
14. Changes to this policy
We may update this policy from time to time. The current version is always the one published on this page.
15. Contact & complaints
For any privacy question, contact us at hello@victoriawellness.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.