Privacy Policy

At Nova Glow Clinic (“we”, “our”, or “us”), we are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us, or receive treatment at our clinic.

By using our website or booking an appointment, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

Depending on the services you use, we may collect the following information:

Personal Information

  • Full name
  • Postal address
  • Telephone number
  • Email address
  • Date of birth

Medical Information

To ensure treatments are carried out safely, we may collect relevant health information, including:

  • Medical history
  • Current medications
  • Allergies
  • Skin conditions
  • Consultation records
  • Treatment notes

This information is treated as special category personal data under the UK General Data Protection Regulation (UK GDPR) and is processed only where necessary and with your explicit consent.

Treatment Photographs

With your permission, we may take before-and-after photographs to:

  • Monitor treatment progress
  • Maintain accurate client records
  • Demonstrate treatment results for marketing purposes (only where separate consent has been provided)

You may withdraw your consent for marketing use of your photographs at any time.

Payment Information

Payments are processed securely through trusted third-party payment providers. We do not store your full debit or credit card details.

How We Use Your Information

We use your personal information to:

  • Arrange and manage appointments
  • Carry out consultations and treatments safely
  • Maintain accurate treatment records
  • Provide aftercare advice
  • Respond to enquiries
  • Process payments
  • Comply with legal, regulatory and insurance requirements
  • Improve our services and customer experience

Where you have given consent, we may also contact you regarding promotions, special offers, or clinic updates.

Legal Basis for Processing

Under UK GDPR, we process your personal data using one or more of the following lawful bases:

  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate business interests
  • Explicit consent for processing medical information and marketing communications

You may withdraw your consent at any time where consent is the lawful basis for processing.

Sharing Your Information

We respect your privacy and will never sell your personal information.

We may share your data only where necessary with trusted third parties, including:

  • Appointment booking systems
  • Secure payment providers
  • Professional advisers or insurers
  • IT service providers
  • Regulatory bodies or law enforcement agencies where legally required

All third parties are required to keep your information secure and confidential.

Data Retention

We retain client records only for as long as necessary to:

  • Provide ongoing treatment and aftercare
  • Meet legal and regulatory obligations
  • Resolve disputes
  • Maintain appropriate insurance records

When your information is no longer required, it will be securely deleted or anonymised.

Data Security

We take appropriate technical and organisational measures to safeguard your personal information against unauthorised access, misuse, alteration, disclosure or loss.

Although we take every reasonable precaution, no method of electronic storage or internet transmission can be guaranteed to be completely secure.

Marketing Communications

If you choose to receive marketing communications, we may contact you by email, SMS or telephone regarding:

  • Promotions
  • New treatments
  • Clinic news
  • Exclusive offers

You may opt out of marketing communications at any time by following the unsubscribe instructions included in our messages or by contacting us directly.

Your Rights

Under the UK GDPR, you have the right to:

  • Request access to your personal information
  • Request correction of inaccurate or incomplete data
  • Request deletion of your information where applicable
  • Request restriction of processing
  • Object to certain types of processing
  • Withdraw consent where processing is based on consent
  • Request data portability where applicable
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

For further information about your rights, please visit the ICO website.

Cookies

Our website may use cookies to improve your browsing experience, analyse website traffic and enhance functionality.

For more information, please refer to our separate Cookie Policy.

Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites and encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, business practices or our services.

Any updates will be published on this page with a revised effective date.

Contact Us

If you have any questions about this Privacy Policy or how we process your personal information, please contact Nova Glow Clinic using the contact details provided on our website.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection