Privacy Policy
Last updated: 12/11/2025
1. Introduction
Innovate Aesthetics Limited (“we”, “us”, “our”) is committed to protecting the privacy and confidentiality of all personal data we collect. This policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
We are a limited company registered in Scotland providing professional aesthetic and medical skincare treatments delivered by a registered nurse.
Company name: Innovate Aesthetics Limited
Registered address:
128 City Road
London
EC1V 2NX
Email: info@innovateaesthetics.co.uk
2. Personal Data We Collect
We may collect and process the following information:
• Name, address, email address, and phone number
• Date of birth
• Medical history and health information relevant to aesthetic treatments
• Treatment records and consent forms
• Payment information (processed securely through Stripe or SumUp)
• Communication records (emails, messages, enquiries)
3. How We Collect Data
We collect information when you:
• Book a consultation or appointment
• Complete medical history or consent forms
• Communicate with us by email or online
• Make payments through our booking system or in-clinic terminals
All treatment and medical information is stored securely through Aesthetic Nurse Software, a GDPR-compliant clinical management platform.
4. How We Use Personal Data
We use your information to:
• Book and manage appointments
• Deliver safe and effective aesthetic treatments
• Maintain accurate medical and treatment records
• Communicate regarding your appointments or aftercare
• Process payments securely
• Comply with legal or regulatory requirements
We will only use your personal information for the purpose for which it was collected.
5. Lawful Basis for Processing
Our lawful bases for processing your data include:
• Consent – when you agree to treatment or marketing communication
• Contract – to provide our aesthetic services to you
• Legal obligation – to meet professional and regulatory requirements
• Legitimate interest – to operate and improve our business safely and effectively
6. How We Protect Your Data
• All data is stored securely using Aesthetic Nurse Software, which employs encryption, access controls, and secure data hosting.
• Access is limited to authorised staff members.
• Payment details are not stored by us. Payments are processed via:
• Stripe (for online booking deposits)
• SumUp (for in-person card transactions)
Both Stripe and SumUp are PCI DSS compliant and handle payment security directly.
• We implement technical and organisational measures to protect data from unauthorised access, alteration, disclosure, or destruction.
7. Data Retention
We retain medical and treatment records for the period required by law and our professional indemnity insurance (typically up to 7 years after last treatment). After this period, records are securely deleted.
8. Sharing of Personal Data
We do not sell or share your personal data with third parties for marketing purposes.
We may share data only with:
• Regulators or authorities if legally required (e.g., for insurance or compliance)
• Service providers who support our operations (e.g., software, payment processors), bound by confidentiality and data protection agreements.
9. Your Rights
Under UK GDPR, you have the right to:
• Access your personal information
• Request correction or deletion
• Withdraw consent
• Restrict or object to processing
• Request data portability
To exercise these rights, please contact us at:
10. Cookies & Website Analytics
Our website may use cookies or analytics tools to improve functionality and understand visitor behaviour. You can manage cookie settings in your browser.
11. Updates to This Policy
We may update this privacy policy periodically. The latest version will always be available on our website.
12. Contact Information
If you have any questions or concerns about this policy or your data, please contact:
Innovate Aesthetics Limited
128 City Road
London
EC1V 2NX
Email: info@innovateaesthetics.co.uk
If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO):