Privacy Policy

Bonavada Aesthetics
Website: www.bonavadaaesthetics.co.uk
Last updated: Wed 12th August, 2026

1. Who we are

Bonavada Aesthetics provides aesthetic treatments, skin treatments, injectable treatments, consultation services and related client care services in Worthing, West Sussex.

For the purposes of UK data protection law, Bonavada Aesthetics is the data controller for the personal information we collect and use.

If you have any questions about this privacy policy or how your personal information is handled, you can contact us at:

Bonavada Aesthetics, Worthing
Email: hello@bonavadaaesthetics.co.uk
Phone: 07902 245304

2. What personal information we collect

We may collect and use the following types of personal information:

• Your name, date of birth, contact details and address
• Appointment and booking information
• Treatment enquiry details
• Medical history and consultation information
• Information about allergies, medication, contraindications, previous treatments and relevant health conditions
• Treatment records, consent forms and aftercare notes
• Before-and-after photographs, where relevant and with appropriate consent
• Payment and transaction information
• Marketing preferences
• Messages sent through our website, social media, WhatsApp, email or booking system
• Website usage information, such as cookies, analytics data and device information

We only collect information that is necessary for the service being provided, legal compliance, client safety, clinical record keeping, insurance purposes, or business administration.

3. Why we collect your information

We use your personal information to:

• Respond to enquiries
• Arrange and manage appointments
• Assess your suitability for treatment
• Provide consultations and treatments safely
• Keep accurate treatment and consent records
• Provide aftercare advice and follow-up support
• Manage payments, deposits, refunds and invoices
• Send appointment confirmations and reminders
• Maintain insurance, legal and professional records
• Deal with complaints, incidents or legal claims
• Send marketing messages where you have consented or where we are legally allowed to do so
• Improve our website, services and client experience

4. Our lawful basis for using your information

Under UK GDPR, we must have a lawful basis for using your personal information. Depending on the situation, we may rely on:

Contract
Where we need your information to provide a consultation, treatment, booking or related service.

Consent
Where you have given clear permission, for example for certain marketing communications, use of before-and-after images, or optional promotional content.

Legal obligation
Where we need to keep records or comply with legal, tax, regulatory or insurance requirements.

Legitimate interests
Where we have a reasonable business reason to use your information, such as responding to enquiries, managing client relationships, improving services, protecting the business, or keeping records, provided your rights do not override those interests.

Vital interests
In rare situations, where information may be needed to protect someone’s life or safety.

5. Special category health data

Some of the information we collect may include health-related information. This is classed as special category data under UK GDPR and requires extra protection.

We may process this information because it is necessary to assess treatment suitability, provide safe care, keep accurate treatment records, manage aftercare, support insurance requirements and deal with any concerns, complaints or legal claims.

Where required, we rely on an appropriate special category condition under UK data protection law, such as explicit consent, health-related care, legal claims, or substantial public interest where applicable.

We do not collect health information unless it is relevant to your consultation, treatment, safety, aftercare or legal/insurance record keeping.

6. Before-and-after photographs

We may take photographs as part of your consultation or treatment record. These images may be used to:

• Assess your treatment needs
• Record your treatment progress
• Support clinical notes and aftercare
• Provide evidence for insurance, complaint handling or legal purposes

We will not use identifiable photographs for marketing, social media, website content or promotional material unless you have given separate consent.

You can withdraw consent for marketing use of your images at any time. This will not affect the lawful use of images already required as part of your treatment record, insurance records or legal obligations.

7. Marketing communications

We may contact you with offers, updates, treatment information or clinic news if:

• You have opted in to receive marketing, or
• You are an existing client and the law allows us to send relevant service or marketing information, provided you can opt out

You can unsubscribe or opt out of marketing at any time by contacting us or using the unsubscribe option where available.

We will not sell your personal information to third parties.

8. Who we share your information with

We may share your information with trusted third parties where necessary, including:

• Booking and client management software providers
• Payment providers, such as card payment and online payment processors
• Email, SMS or communication service providers
• Website hosting and analytics providers
• Insurance providers
• Professional advisers, such as accountants, legal advisers or compliance consultants
• Prescribers, pharmacies or clinical professionals where relevant to your treatment
• Regulators, law enforcement, courts or authorities where legally required

Where third-party providers process personal data on our behalf, they are expected to keep it secure and only use it for the agreed purpose.

9. Payments

We may use third-party payment providers to process deposits, treatment payments or online payments. We do not normally store full card details ourselves. Payment providers process your payment information securely in line with their own privacy and security standards.

10. Website cookies and analytics

Our website may use cookies and similar technologies to make the website work properly, improve user experience, understand website traffic, and support marketing or analytics.

Some cookies are essential for the website to function. Others, such as analytics or marketing cookies, should only be used with your consent where required.

You can manage cookie preferences through your browser settings or any cookie banner/settings tool provided on our website.

11. How long we keep your information

We keep personal information only for as long as necessary for the purpose it was collected.

Treatment records, consultation forms, consent forms, photographs and related notes may be kept for a longer period because they may be needed for client safety, insurance, legal claims, complaints or professional record keeping.

As a general guide:

• Enquiry records may be kept for up to 2 years
• Client treatment records may be kept for up to 7 years after your last treatment
• Financial records may be kept for at least 6 years for tax and accounting purposes
• Marketing consent records may be kept until you withdraw consent or unsubscribe
• Complaint, incident or legal records may be kept for as long as necessary to protect legal rights

These periods may vary where legal, insurance or professional requirements require a longer retention period.

12. How we keep your information secure

We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure or alteration.

This may include secure booking systems, password-protected accounts, restricted access, secure devices, encrypted platforms where available, and careful handling of consultation and treatment records.

No system can be guaranteed to be completely secure, but we take data protection seriously and only allow access where there is a valid business or treatment-related reason.

13. Your data protection rights

You have rights under UK data protection law, including the right to:

• Access the personal information we hold about you
• Ask for inaccurate information to be corrected
• Ask for your information to be deleted in certain circumstances
• Ask us to restrict how we use your information
• Object to certain types of processing
• Withdraw consent where we rely on consent
• Ask for your information to be transferred where applicable
• Complain to the Information Commissioner’s Office

Some rights may be limited where we need to keep information for legal, insurance, tax, safety, professional or legitimate business reasons.

14. Withdrawing consent

Where we rely on consent, you can withdraw it at any time.

This may apply to marketing messages, optional image use, testimonials or promotional content.

Withdrawing consent will not affect any processing already carried out before consent was withdrawn. It also may not require us to delete records that we need to keep for treatment, legal, insurance or safety reasons.

15. Children and young people

Our services are intended for adults unless otherwise stated. We do not knowingly collect personal information from children for treatment purposes without appropriate parental or guardian involvement and suitable safeguards.

16. Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, which is the UK regulator for data protection.

Website: www.ico.org.uk
Phone: 0303 123 1113

17. Changes to this privacy policy

We may update this privacy policy from time to time. The latest version will always be available on our website.