Privacy Policy — Adora Clinic

1. Introduction

Adora Clinic ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, book treatments, or interact with our services.

We are based at Office 8, 708a High Road, London, N12 9QL. For any data protection queries, please contact us at [email protected] or call 074 4001 5181.

2. Information We Collect

We may collect and process the following personal data:

Identity data: your full name, date of birth, and gender
Contact data: your email address, telephone number, and postal address
Health and medical data: medical history, allergies, medications, skin conditions, photographs taken before and after treatment, and consultation notes
Booking data: treatment preferences, appointment dates, and consultation records
Financial data: payment information processed securely through our payment provider
Technical data: IP address, browser type, and usage data collected through cookies when you visit our website
Communication data: any correspondence you send us via email, phone, or our booking form

3. How We Use Your Information

We use your personal data for the following purposes:

To provide and manage your aesthetic treatments safely and effectively
To carry out medical consultations and assessments prior to treatment
To process and confirm your bookings and appointments
To communicate with you about your appointments, treatments, and aftercare
To maintain accurate medical and treatment records as required by law
To process payments for services rendered
To respond to your enquiries and provide customer support
To send you relevant updates about our services (only with your consent)
To comply with legal and regulatory obligations

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your data on the following lawful bases:

Consent: where you have given us explicit consent, such as for marketing communications or the processing of health data for consultations
Contractual necessity: where processing is necessary to fulfil a booking or provide a treatment you have requested
Legal obligation: where we are required to retain medical records or comply with health and safety regulations
Legitimate interests: where processing is necessary for running our business, improving our services, or ensuring security

5. Special Category Data

As an aesthetic clinic, we process special category health data. This includes information about your medical history, skin conditions, allergies, and treatment records. We process this data on the basis of your explicit consent, which we obtain during your consultation. You may withdraw this consent at any time, although this may affect our ability to provide certain treatments safely.

6. How We Store and Protect Your Data

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:

Secure storage of physical and digital records
Restricted access — only authorised staff can access your personal and medical data
Encrypted communications for sensitive information
Regular review of our data protection practices

Your personal data is stored within the United Kingdom. We do not transfer your data outside the UK unless required and appropriate safeguards are in place.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Specifically:

Medical and treatment records: retained for a minimum of 8 years from the date of last treatment, or longer if required by professional or regulatory guidelines
Booking and contact records: retained for 3 years after your last appointment
Marketing data: retained until you withdraw consent or unsubscribe
Financial records: retained for 7 years in accordance with HMRC requirements

8. Your Rights

Under the UK GDPR, you have the following rights:

Right of access: to request a copy of the personal data we hold about you
Right to rectification: to request correction of any inaccurate or incomplete data
Right to erasure: to request deletion of your data where there is no compelling reason for continued processing (subject to legal retention requirements)
Right to restrict processing: to request limitation of how we use your data
Right to data portability: to request your data in a structured, machine-readable format
Right to object: to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Cookies

Our website may use cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you use our website. You can manage or disable cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.

10. Third-Party Services

We may use third-party services to assist in operating our business, such as appointment booking platforms, payment processors, and email service providers. These third parties only have access to your data as needed to perform their functions and are contractually obligated to handle it securely and in accordance with data protection law.

We do not sell, rent, or trade your personal data to any third parties for marketing purposes.

11. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18 without parental or guardian consent. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

13. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Adora Clinic
Office 8, 708a High Road, London, N12 9QL
Email: