top of page

Privacy Policy

1. Company Information & Scope


Jade Orchid Aesthetics Ltd. is registered in England & Wales (Company Number: TBA .)


Registered Office: 20-22 Wenlock Road, London, N1 7GU
Trading Address: White House Dental 20-22 Wenlock Street , 386 East Park Road, Leicester, LE5 5HH

 

This Privacy Policy explains how we collect, store, use, and disclose your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and related guidance. It applies to all clients and visitors of our website (jadeorchidaesthetics.co.uk) and clinical services.

 

2. Data We Collect


We collect different types of data for specific, lawful purposes:

​

  • Identity Data: Name, date of birth, gender.

  • Contact Data: Email, phone, address (for home visits).

  • Enquiry Data: Contact details and content from website forms or messages, used to respond to your enquiry.

  • Medical & Treatment Data: Health history, medication, allergies, lifestyle details, clinician notes, pre-/post-treatment photos (with consent). Required to provide safe and tailored clinical care.

  • Booking & Service Data: Appointment details, treatment history, outcome records.

  • Payment Data: Name, billing details; processed securely via PCI-DSS-compliant third-party providers (e.g., Stripe).

  • Marketing Preferences: If opted-in, your preferences and consent for marketing communications.

  • Technical & Cookie Data: IP address, browser/device type, visited pages, analytics data. See Section 8 for details.

 

3. Lawful Bases for Processing

 

  • Consent: For health data, before/after images, marketing communications. You may withdraw consent anytime.

  • Contract: For service delivery (e.g., bookings, payments, providing treatment).

  • Legal Obligation: Compliance with tax, health, safety, and medical regulations.

  • Legitimate Interests: Site improvement, fraud prevention, or occasional service updates (opt-out always available).

 

4. How We Use Your Data

​

  • Manage appointments and reminders.

  • Deliver safe, personalised treatments and aftercare.

  • Process and track payments.

  • Send marketing emails (with consent).

  • Improve website functionality and diagnose technical issues.

  • Fulfil regulatory duties (e.g., MHRA, CQC).

 

5. Sharing & Disclosure

​

We do not sell your data. Sharing occurs only when essential:

​

  • Medical Referrals: With GPs, dermatologists, or pharmacies—with consent.

  • Laboratories & Pharmacies: For diagnostic or prescribed products.

  • Payment Processors: E.g., Stripe; encrypted and tokenised only.

  • Regulatory Bodies: e.g., MHRA, ICO, or law enforcement when legally required.

  • Professional Services: Accountants, solicitors, IT consultants under confidentiality agreements.

 

6. Data Retention Periods

​

Data Type

  1. Medical & Treatment Records

  2. Financial Records

  3. Marketing Consent

  4. Website Analytics

​

Retention Period

  1. Minimum 8 years (or until age 25 for minors)

  2. 7 years (HMRC requirement)

  3. Until consent withdrawn

  4. Up to 12 months


Records are securely stored in encrypted UK/EU-based servers and restricted-access clinic files.

 

7. Your Rights under UK GDPR

​

You have the right to:

​

  • Access: View personal data we hold.

  • Rectification: Amend inaccuracies.

  • Erasure: Request deletion (exceptions apply to medical records).

  • Restrict Processing: Limit how your data is used.

  • Data Portability: Request transfer to another provider.

  • Object: Stop direct marketing or object to legitimate interest processing.

  • Withdraw Consent: Anytime for consent-based processing.

  • Lodge a Complaint: Contact the Information Commissioner’s Office (ICO).

 

To exercise rights, email: privacy@jadeorchidaesthetics.co.uk

Subject: “Data Subject Access Request (DSAR)”

We aim to respond within one month.

 

8. Cookies & Analytics

​

We use cookies to enhance user experience and website performance:

​

  • Necessary Cookies: Ensure website operation.

  • Analytics Cookies: Use Google Analytics to understand site traffic anonymously.

  • Marketing Cookies: May be used (if enabled); you can disable via browser or cookie banner.

 

You can manage preferences anytime via our “Cookie Settings” or in your browser.

 

9. Children & Minors

​

Our services are intended for users 18+. We do not knowingly process children’s data. If this occurs in error, contact us for prompt deletion.

 

10. Data Security

​

We use:

  • HTTPS encryption

  • Secure cloud backups

  • Staff training

  • Access control policies

  • Regular vulnerability audits

 

11. International Data Transfers

​

We do not transfer personal data outside the UK or EEA. Should this change, we will apply lawful safeguards such as adequacy decisions or Standard Contractual Clauses.

 

12. Policy Updates

​

We update this policy annually or when regulations or operations change. Changes are posted on our website with updated date.

​

​

Contact Us Data Protection Officer: info@jadeorchidaesthetics.co.uk
Postal Address: Jade Orchid Aesthetics Ltd., 386 East Park Road, Leicester, LE5 5HH

​

bottom of page