Noa Medical Aesthetics

Privacy Policy

  • Noa Medical Aesthetics Ltd (UK GDPR Compliant)

    1. Introduction

    Noa Medical Aesthetics Ltd is committed to protecting your personal data and respecting your privacy. This notice explains how your information is collected, used, stored, and protected in accordance with UK GDPR and the Data Protection Act 2018.

    2. Data Controller

    Noa Medical Aesthetics Ltd Prestwick, Scotland, United Kingdom

    Contact: 07577801138 or noa.medicalaesthetics@gmail.com

    3. What Personal Data We Collect

    We may collect the following information:

    · Name, date of birth, contact details

    · Medical history and health information

    · Treatment records and consent forms

    · Photographs (with your consent)

    · Payment information

    · Communication records (emails, messages, booking notes)

    4. Why We Collect Your Data

    Your data is used for:

    · Clinical assessment and safe treatment planning

    · Legal and regulatory compliance

    · Appointment management

    · Record keeping

    · Communication regarding your care

    · Marketing (only with explicit consent)

    5. Lawful Basis for Processing

    We process your data under:

    · Consent – when you agree to treatment or marketing

    · Legal obligation – medical record keeping requirements

    · Contract – providing services you have booked

    · Legitimate interest – clinic administration and safety

    6. How Your Data Is Stored

    · Records are stored securely in encrypted digital systems or locked physical files

    · Access is restricted to the practitioner only

    · Data is retained for the legally required period (typically 7 years for medical records)

    7. Sharing Your Data

    Your data will never be sold or shared for marketing. It may be shared only when legally required, such as:

    · With healthcare professionals in emergencies

    · For insurance or regulatory purposes

    · When required by law enforcement or courts

    8. Your Rights

    Under UK GDPR, you have the right to:

    · Access your data

    · Request corrections

    · Request deletion (where legally permissible)

    · Withdraw consent

    · Object to processing

    · Request data transfer

    Requests can be made by contacting the clinic.

    9. Marketing Consent

    You will only receive marketing communications if you have explicitly opted in. You may withdraw consent at any time.

    10. Photography

    Clinical photographs may be taken for medical records. Separate consent is required for use in marketing or social media.

    11. Cookies & Website Data

    If you operate a website, you may collect:

    · Analytics data

    · Cookie preferences A separate cookie policy may be required.

    12. Changes to This Notice

    This Privacy Notice may be updated periodically. The most recent version will be available upon request.

    13. Contact

    For questions or data requests, contact: Kirsty Locke, 07577801138.