Privacy policy
What personal data DocAesthetics collects, why, who handles it for us and how to use your rights under UK data protection law.
Who is responsible and which law applies
The person responsible for your data is the owner of DocAesthetics (docaesthetics.co.uk). You can write to info@docaesthetics.co.uk about anything to do with your data. We handle it under the UK GDPR and the Data Protection Act 2018.
What we collect and why
From visitors, the IP address, browser and pages opened, so that the site stays secure and works properly. Our lawful basis is legitimate interests.
From people who write to us, the message and whatever it contains, so that we can reply. Our lawful basis is legitimate interests.
From clinic accounts in the business area, the sign-in email and the clinic’s details, so that we can run its page and any plan it buys. Our lawful basis is the contract with the clinic.
Please do not send us anything about your health, your medical history or photos of the area you would like treated. We do not need it, we cannot act on it and we delete it if it arrives.
No advertising and no tracking cookies
DocAesthetics shows no adverts. It does not use AdSense or any other advertising network, and it sets no advertising cookies and no analytics cookies. Visits are counted with Cloudflare Web Analytics, which works without cookies. The only cookie is a technical one that keeps clinic owners signed in to the business area. It is strictly necessary for that purpose, so under the Privacy and Electronic Communications Regulations it needs no consent and there is no cookie banner.
Who handles data for us
Cloudflare hosts and protects the site, counts visits without cookies and handles email. The forms on the site use Turnstile, also from Cloudflare, to check that a person is sending them. Stripe charges the plans that clinics buy and processes the card details itself, so they never pass through us. Some of these providers are based in the United States. Where data is handled outside the UK, they rely on the safeguards that UK law allows.
How long we keep data
Browsing data, only as long as security needs it. Messages, until your query has been dealt with. Clinic accounts, while they stay open. Invoices, for as long as tax rules require.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, ask us to limit how we use it, object to its use and ask to receive it in a form you can take elsewhere. Write to info@docaesthetics.co.uk and we will reply. If you think we have not handled your request properly, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes
If the way we handle data changes, we will update this page.