We are committed to protecting your privacy, and the privacy of our website visitors. Any information that will be collected and will be used in accordance with the General Data Protection Regulation and the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003. Information gathered will not be shared with any third party companies for direct marketing.
This Privacy Notice is provided by Aesthetics Lab which is the trading name of TMK Aesthetics Lab LLP. This Notice applies to all data subjects whose personal data is collected by Aesthetics Lab.
Aesthetics Lab is a clinic that provides an extensive list of treatments for face and body. We provide a bespoke treatment for each client matching the services we offer with the needs of the clients. Aesthetics Lab is located at 128 Regents Park Road, London, NW1 8XL.
Our GDPR owner and data protection representative is Marsha Starcevic who will deal with all enquiries concerning Aesthetics Lab use of your personal data and can be contacted directly at firstname.lastname@example.org or 0207 722 5872
The purpose of this notice is to inform you (data subjects) of what personal data we collect about you in line with the requirements of GDPR.
Aesthetics Lab will generally only receive personal data from the individual concerned directly in the course of conducting business. This may be in person, via email, web form or telephone. However, in some cases personal data will be supplied by third parties (for example online booking platforms or job sites) but only when you have specifically booked a service/treatment or responded to a vacancy offered by Aesthetics Lab on a third party platform.
In the course of our business Aesthetics Lab will collect certain types of personal data which will include:
During the course of our business, we need to process a wide range of personal data and we will only do so in accordance with the law. Some of this is done to fulfil Aesthetics Lab’s legal obligations including those related to its employees or contractual obligations such as those to its insurers. In other cases, we will process data where it is in our legitimate interest except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Aesthetics Lab believes the following use will fall within the category of legitimate interest:
Given that we need to collect health information and this is classed as a special category of personal data we need to identify a specific condition under Article 9. The condition on which we rely is that processing is necessary for the purposes of providing health care or treatment.
Personal information gathered will not be shared with any third party companies for direct marketing.
Usually, personal data collected by Aesthetics Lab will remain within Aesthetics Lab and will be processed by appropriate employees. Some of the processing is carried by third parties such as website developers, cloud storage providers but is at all times kept securely and only processed with the directions of Aesthetics Lab.
On occasion, we will need to share personal information, to meet our legal obligations or for contractual reasons, with third parties such as banks lawyers, insurers, accountants or government authorities such as HRMC if you are an employee.
If you decide to apply for finance we will only share your email address with the finance company so that they may communicate with you directly.
We are committed to complying with our legal obligation to the retention and deletion of personal information. The type of data and the purpose for collection will determine how long Aesthetics Lab will retain your data. We will not process your personal information for purposes longer than necessary.
Employee data can be kept for up to seven years following departure from the company. Details of an unsuccessful applicant to vacancies will be stored for up to one year.
Our insurers require Aesthetics Lab to keep Client records, including medical data, images and treatment data for 10 years from the date of your last treatment following which it will be securely disposed of.
Data of those engaged with the business such as contacts for an active contract or receivers of our monthly newsletter will be retained as long as the service is being contracted or newsletter is being sent.
Emails of those who have opted out of receiving our newsletter services will be kept indefinitely to ensure continued compliance.
Financial and accounting records will be kept for 6 years from the end of the last company financial year they relate to or longer if the tax return was late or if HMRC requests it.
Your Rights As A Data Subject At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:
If you believe that we have not complied with our privacy notice you may complain to the Information Commissioner’s office (ICO) although as recommend by the ICO please allow Aesthetics Lab the opportunity to resolve the matter before involving the regulator.
All queries and complaints in the first instance should be directed by email to Marsha Starcevic at email@example.com.