Visage Dermalogical Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.

Who We Are

Visage Dermalogical Ltd
72 The Broadway, Stanmore, HA7 4DU

We are registered with the Information Commissioner’s Office, registration number Z8490232.

For any question about this policy or how your data is handled, contact Moshit Diamond at sales@visagedermalogical.com or 020 8954 0035.

Information We Collect

We collect and process the following categories of personal data:

• Booking and contact details: name, email, phone number, and appointment details, collected when you book an appointment, whether in clinic, by phone, by WhatsApp, or through our website.

• Clinical and treatment records: information about your skin, health history, and the treatments you receive, recorded so our practitioners can provide safe and appropriate care. This is special category health data under UK data protection law, and we only collect it with your explicit consent, given as part of your consultation.

• Payment information: processed securely through Phorest Pay at the time of your appointment. We do not store your full card details.

• Marketing preferences: if you choose to opt in via Phorest, we may send you offers and updates. You can opt out at any time.

• CCTV footage: our clinic premises use CCTV for the safety and security of clients, staff, and property. Footage is retained for a limited period and is not used for any other purpose.

• Messages sent to our WhatsApp number: if you contact us via WhatsApp, we retain those messages as part of your client record in the same way as other booking communications.

Children’s Information

Some treatments may involve clients under the age of 18, always with parental or guardian consent and, where appropriate, parental presence. Where we hold personal or clinical data for a client under 18, we apply the same protections as for all clients, with any consent obtained from a parent or guardian.

Why We Use Your Information

We use your information to:

• Book, manage, and provide your appointments and treatments

• Maintain accurate clinical records for your safety and continuity of care

• Take payment for services

• Send you marketing communications, only if you have opted in

• Maintain the security of our premises

• Meet our legal and professional obligations as a clinic

Legal Basis for Processing

For general contact and booking details, we rely on the performance of a contract with you and our legitimate interest in running the clinic. For clinical and health-related information, we rely on your explicit consent, given at consultation, and where relevant, on the provision of health care by a health professional. For marketing communications, we rely on your specific opt-in consent, given through Phorest.

Who We Share Your Information With

We use the following systems to help run the clinic, each of which may process your data on our behalf:

• Phorest: our appointment booking, clinical record, and payment system.

• Google Business Profile: where you may leave a public review, visible to other prospective clients.

• Meta (Instagram and Facebook): if you interact with us through social media.

We do not sell your personal information to any third party.

Data Retention

We retain clinical and treatment records for 7 years from your last treatment, in line with standard practice for health and aesthetic record keeping. Other records, such as general booking or contact details, are kept only for as long as needed for the purpose they were collected for, or as required by law.

Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you

• Ask us to correct inaccurate data

• Ask us to delete your data, where we are not required to keep it for legal or clinical reasons

• Withdraw marketing consent at any time

• Object to how we process your data

• Complain to the Information Commissioner’s Office (ico.org.uk) if you believe we have not handled your data correctly

To exercise any of these rights, contact Moshit Diamond at sales@visagedermalogical.com.

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page.

Last updated: [insert date of publish]