Privacy policy

Aesthetic Plastic Surgery is committed to ensuring the privacy of our patients and website visitors. This policy explains what personal data we may collect about you when you interact with us and how we use it.

Our promise

Service: We will only use your data to improve your experience of our services
Patient Safety: We will only use your sensitive personal data to ensure your care and safety

Who we are?

Aesthetic Plastic Surgery Ltd is a registered company: Reg Number 04412624. Lucian Ion of Aesthetic Plastic Surgery of Aveling House, 1B Upper Wimpole Street, London W1G 6AB is the data controller in relation to the processing of personal information that you provide us when using our services. You can contact our Data Protection Officer at: [email protected] or write to:

Data Protection Officer
Aesthetic Plastic Surgery Ltd.
Aveling House
1B Upper Wimpole Street
London W1G 6AB

Your personal and sensitive personal data

Under data protection legislation, the data that organisations hold about you can be categorised as follows:

Personal Data: This is data related to an identifiable person or data that can be used to identify a distinct individual. Examples of personal data we collect, and process include names, email addresses, location, telephone numbers. Where this policy states "your data/your personal data" we are referring to Personal Data unless otherwise stated.

Sensitive Personal Data: Sometimes referred to as "Special Category Data", this is data that is deemed to be more sensitive than the above personal data. For example, medical records, genetics, biometric data, details of ethnicity, sexual orientation. We only use this data for the purposes of your treatment and to ensure you care and safety as a patient. We will usually ask for your consent to collect or process this data, though there may be instances where we are required or permitted to do so by applicable law (e.g. To comply with public health requirements). We never use your sensitive personal data for marketing purposes.

The legal bases we rely on

Under data protection legislation, organisations must have one of several reasons for processing your personal data. Below we outline the bases we use and an example of the purpose for which it is used:

Consent: In some situations, we ask for your consent to process your data for the purpose we have identified. As a patient you may be asked for consent to allow us to collect sensitive personal data about you to ensure your safe treatment and care.

Contractual obligations: Sometimes we may need your data to fulfil our obligations. For example, if you wish to book an appointment we may need your payment details, address and contact details to process payment and secure your booking.

Legal compliance: There may be some situations where we are required by law or regulatory bodies to process your data. For example, gathering information as part of investigations by regulatory bodies or in connection with legal proceedings or requests.

When do we collect your personal data

When you make an enquiry on any of our websites
When you communicate with us by phone or email or instant messaging systems
When you request further information from us
When you arrange appointments with clinic staff
When you attend appointments and as part of the consultation process
When you make payments to us or require a refund
When you fill in any forms online or in clinic
When you visit our clinics, we may operate CCTV systems for security purposes

What personal data we collect

Whilst using our website you may submit information to us via an enquiry form. This may include your name, email address, phone number and postcode. We require this information to contact you regarding your enquiry.
Payment details.

Our website enquiry form

When you send an enquiry through the form on our Contact us page, we collect your name, email address, telephone number, the procedure you are interested in, how you would prefer us to contact you and any message you choose to add. We use these details only to reply to your enquiry and, if you wish, to arrange a consultation. The legal basis is your consent, which you give by ticking the box on the form; you can withdraw it at any time by contacting us.

Your enquiry is sent by email to our practice team. A copy is also kept in a private area of our web server that cannot be reached from the internet, so that no enquiry is lost if an email fails; this copy is deleted automatically after 90 days. To protect the form from automated spam, the server keeps a scrambled code (not your actual internet address) for up to two days so it can limit repeated submissions. Please do not include detailed medical information in the form – we will discuss this with you in confidence.

The form may use Cloudflare Turnstile, a security check that confirms a real person is sending the form. It works without advertising or tracking cookies; Cloudflare processes technical information about your browser and connection for this purpose only. See Cloudflare’s Turnstile privacy notice.

Measuring our online advertising

We advertise on Google. Only if you click “Accept” in the cookie message, our website uses Google Ads cookies to record whether a visit that began with one of our adverts led to an enquiry. Google then receives the addresses of the pages you visit on our website and, if you send an enquiry, the fact that an enquiry was made with a random reference number. Google never receives your name, contact details, the procedure you chose or your message, and we do not use this information for personalised advertising or “remarketing”. If you click “Reject”, no advertising cookies are set and nothing is loaded from Google. You can change your choice at any time with the “Cookie settings” link at the foot of every page. See our Cookie Policy and Google’s privacy policy.

How and why do we use your personal data

We want to give you the best possible experience from your very first interaction with us. One way to achieve this is to better understand who you are by collecting data about you.

There are many cases where we are required to collect and process data about you either to fulfil our contractual obligations to you or to comply with the law.

We use your personal data for the following purposes:

To provide you with further information about the subject of your enquiry so you understand your options and can make an informed decision
To remind you by email to book subsequent appointments for a treatment you have previously had which requires ongoing review
To contact you regarding your appointments and treatments - we want to make sure you don't miss your appointments.
To make sure we're speaking to the right person - to help prevent and detect fraud.
To take payment and process refunds
To provide customer service and support

How we protect your data

We take the security of your data seriously and take all appropriate steps to protect it from unauthorised access, loss and misuse. We never sell any of your personal data for any purpose. Any sensitive personal data we may collect (such as medical records) is never used for marketing purposes and access to such data is further restricted.

How long do we keep your data

We only keep your data for as long as is necessary to fulfil the purpose for which it was collected. At the end of the period, your data will either be deleted or anonymised so that it can be used in a non-identifiable way for statistical analysis which helps us make improvements to our service and business.

Cookies & similar technologies

We don't use tracking or analytics cookies on our websites since 14th May 2018. There may however be cookies from previous visits that have been downloaded onto your computers/devices. Cookies are small, harmless text files that are downloaded to your computer/device when you visit websites. They serve a range of purposes such as helping us understand our website usage, activity and user behaviour.

Who do we share your personal data with

We never sell your data to any third parties. We want to maintain your trust as a reputable company and believe this is essential to ensure this. We may share your information with other relevant bodies that will be involved in your care such as:

Hospitals that we work with that will be involved in your care
Anaesthetists that may also be involved in your care
Other medical/professionals that are involved in your care

We do use third parties to support, manage or deliver some of our day to day business services. As a result, we may share non-sensitive personal data with the following type of companies we work with:

Companies that help us deliver our emails and electronic communications to you
Companies that support our website, phone handling and other IT/business systems

What are your rights

You have many rights relating to your personal data including:

The right to access the personal data we hold about you
The right to request the correction of inaccurate data about you. If we hold inaccurate or out of date information about you, you can request that we change or update it
The right to request that we delete your data or stop processing it - in some instances such as where we no longer need it, we can delete your personal data
The right to stop direct marketing - You have the absolute right to stop our use of your personal data for direct marketing purposes. In this instance we must always comply with your request
The right to withdraw your consent - Whenever you have given us your consent to use your personal data, you have the right to change your mind and tell us
Please note there may be instances where we refuse your request for any of the above (unless otherwise stated) where we have a strong overriding reason or are legally obliged to

If you wish to exercise any of your rights, have a complaint or questions about this policy, please see the "Who we are?" section for contact details

Changes to this privacy policy

From time to time please check back and review our privacy policy for any changes. We may add or take away from our policy over time so please keep yourself updated.

Complaints

If you have concerns about aspects of the way your data has been handled or used by us and are not satisfied with our response, you can report your concerns to the UK Information Commissioner Office (ICO). Details of how to do this are on the ICO website ico.org.uk.

Any questions

We hope this privacy policy has been helpful in setting out the way we handle your personal data and your rights. If you have any questions that haven't been covered, please contact our Data Protection Officer at: [email protected] or write to: