Bonavada Aesthetics
Website: www.bonavadaaesthetics.co.uk
Last updated: Wed 12th August, 2026
Bonavada Aesthetics provides aesthetic treatments, skin treatments, injectable treatments, consultation services and related client care services in Worthing, West Sussex.
For the purposes of UK data protection law, Bonavada Aesthetics is the data controller for the personal information we collect and use.
If you have any questions about this privacy policy or how your personal information is handled, you can contact us at:
Bonavada Aesthetics, Worthing
Email: hello@bonavadaaesthetics.co.uk
Phone: 07902 245304
2. What personal information we collect
We may collect and use the following types of personal information:
Your name, date of birth, contact details and address
Appointment and booking information
Treatment enquiry details
Medical history and consultation information
Information about allergies, medication, contraindications, previous treatments and relevant health conditions
Treatment records, consent forms and aftercare notes
Before-and-after photographs, where relevant and with appropriate consent
Payment and transaction information
Marketing preferences
Messages sent through our website, social media, WhatsApp, email or booking system
Website usage information, such as cookies, analytics data and device information
We only collect information that is necessary for the service being provided, legal compliance, client safety, clinical record keeping, insurance purposes, or business administration.
We use your personal information to:
Respond to enquiries
Arrange and manage appointments
Assess your suitability for treatment
Provide consultations and treatments safely
Keep accurate treatment and consent records
Provide aftercare advice and follow-up support
Manage payments, deposits, refunds and invoices
Send appointment confirmations and reminders
Maintain insurance, legal and professional records
Deal with complaints, incidents or legal claims
Send marketing messages where you have consented or where we are legally allowed to do so
Improve our website, services and client experience
Under UK GDPR, we must have a lawful basis for using your personal information. Depending on the situation, we may rely on:
Contract
Where we need your information to provide a consultation, treatment, booking or related service.
Consent
Where you have given clear permission, for example for certain marketing communications, use of before-and-after images, or optional promotional content.
Legal obligation
Where we need to keep records or comply with legal, tax, regulatory or insurance requirements.
Legitimate interests
Where we have a reasonable business reason to use your information, such as responding to enquiries, managing client relationships, improving services, protecting the business, or keeping records, provided your rights do not override those interests.
Vital interests
In rare situations, where information may be needed to protect someone’s life or safety.
Some of the information we collect may include health-related information. This is classed as special category data under UK GDPR and requires extra protection.
We may process this information because it is necessary to assess treatment suitability, provide safe care, keep accurate treatment records, manage aftercare, support insurance requirements and deal with any concerns, complaints or legal claims.
Where required, we rely on an appropriate special category condition under UK data protection law, such as explicit consent, health-related care, legal claims, or substantial public interest where applicable.
We do not collect health information unless it is relevant to your consultation, treatment, safety, aftercare or legal/insurance record keeping.
We may take photographs as part of your consultation or treatment record. These images may be used to:
Assess your treatment needs
Record your treatment progress
Support clinical notes and aftercare
Provide evidence for insurance, complaint handling or legal purposes
We will not use identifiable photographs for marketing, social media, website content or promotional material unless you have given separate consent.
You can withdraw consent for marketing use of your images at any time. This will not affect the lawful use of images already required as part of your treatment record, insurance records or legal obligations.
We may contact you with offers, updates, treatment information or clinic news if:
You have opted in to receive marketing, or
You are an existing client and the law allows us to send relevant service or marketing information, provided you can opt out
You can unsubscribe or opt out of marketing at any time by contacting us or using the unsubscribe option where available.
We will not sell your personal information to third parties.
We may share your information with trusted third parties where necessary, including:
Booking and client management software providers
Payment providers, such as card payment and online payment processors
Email, SMS or communication service providers
Website hosting and analytics providers
Insurance providers
Professional advisers, such as accountants, legal advisers or compliance consultants
Prescribers, pharmacies or clinical professionals where relevant to your treatment
Regulators, law enforcement, courts or authorities where legally required
Where third-party providers process personal data on our behalf, they are expected to keep it secure and only use it for the agreed purpose.
We may use third-party payment providers to process deposits, treatment payments or online payments. We do not normally store full card details ourselves. Payment providers process your payment information securely in line with their own privacy and security standards.
Our website may use cookies and similar technologies to make the website work properly, improve user experience, understand website traffic, and support marketing or analytics.
Some cookies are essential for the website to function. Others, such as analytics or marketing cookies, should only be used with your consent where required.
You can manage cookie preferences through your browser settings or any cookie banner/settings tool provided on our website.
We keep personal information only for as long as necessary for the purpose it was collected.
Treatment records, consultation forms, consent forms, photographs and related notes may be kept for a longer period because they may be needed for client safety, insurance, legal claims, complaints or professional record keeping.
As a general guide:
Enquiry records may be kept for up to 2 years
Client treatment records may be kept for up to 7 years after your last treatment
Financial records may be kept for at least 6 years for tax and accounting purposes
Marketing consent records may be kept until you withdraw consent or unsubscribe
Complaint, incident or legal records may be kept for as long as necessary to protect legal rights
These periods may vary where legal, insurance or professional requirements require a longer retention period.
We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure or alteration.
This may include secure booking systems, password-protected accounts, restricted access, secure devices, encrypted platforms where available, and careful handling of consultation and treatment records.
No system can be guaranteed to be completely secure, but we take data protection seriously and only allow access where there is a valid business or treatment-related reason.
You have rights under UK data protection law, including the right to:
Access the personal information we hold about you
Ask for inaccurate information to be corrected
Ask for your information to be deleted in certain circumstances
Ask us to restrict how we use your information
Object to certain types of processing
Withdraw consent where we rely on consent
Ask for your information to be transferred where applicable
Complain to the Information Commissioner’s Office
Some rights may be limited where we need to keep information for legal, insurance, tax, safety, professional or legitimate business reasons.
Where we rely on consent, you can withdraw it at any time.
This may apply to marketing messages, optional image use, testimonials or promotional content.
Withdrawing consent will not affect any processing already carried out before consent was withdrawn. It also may not require us to delete records that we need to keep for treatment, legal, insurance or safety reasons.
Our services are intended for adults unless otherwise stated. We do not knowingly collect personal information from children for treatment purposes without appropriate parental or guardian involvement and suitable safeguards.
If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office, which is the UK regulator for data protection.
Website: www.ico.org.uk
Phone: 0303 123 1113
We may update this privacy policy from time to time. The latest version will always be available on our website.
