Privacy Policy

1. Introduction

At Suhmina Aesthetic Clinic, we are deeply committed to protecting the privacy and confidentiality of our patients. This Privacy Policy details how we collect, store, process, and protect your personal information, clinical history, and diagnostic data in compliance with the General Data Protection Regulation (GDPR) and UK health regulations.

2. Information We Collect

To provide safe, professional medical-grade aesthetic treatments, we must collect and process the following categories of information:

• Personal Details: Full name, date of birth, contact details (phone number, email address, physical address).
• Medical History: Current medications, allergies, contraindications, past procedures, skin diagnostic logs, and physical health details.
• Clinical Records: Safe before-and-after photographs of the treatment area, treatment plans, post-care reports, and clinical outcomes.
• Technical Data: Cookies, web beacons, and analytical data gathered during your visits to our online portal.

3. How We Process Your Data

We process your personal and medical information based on explicit clinical consent and the need to fulfill our treatment contract safely:

• Conducting thorough clinical diagnostic assessments of facial anatomy.
• Structuring highly customized, safe, and medically sound aesthetic plans.
• Documenting treatment progressions through clinical photography.
• Managing bookings, consultations, consultation deposits, and communication updates.
• Complying with statutory medical reporting and insurance obligations.

4. Data Security and Confidentiality

We implement rigorous clinical and digital safeguards to keep your sensitive medical history completely secure:

• All records are stored within secure, access-controlled electronic databases.
• Access to clinical files is strictly limited to authorized medical staff and Level 7 qualified practitioners directly involved in your care.
• Your records are never sold, rented, or shared with third parties for marketing purposes.

5. Data Retention

In accordance with statutory UK medical record retention guidelines and clinical insurance rules, we preserve patient medical histories and clinical photography for a standard period of **eight (8) years** following your last treatment. Once this retention timeline expires, all data is permanently and securely destroyed.

6. Your Legal Rights

Under GDPR and UK data regulations, you retain substantial rights regarding your personal data:

• The right to request copies of your complete medical history and treatment records.
• The right to demand corrections to any inaccurate personal information.
• The right to request the deletion of non-medical records (subject to clinical retention overrides).
• The right to withdraw treatment consent at any time (which will halt future procedures).

To exercise any of these rights, please contact our data officer directly at [email protected].