Legal Information
Our legal policies, your rights and the terms governing our services, written plainly and kept up to date.
Privacy Policy
Last updated: 1 January 2025Who We Are
Visage Medispa ('we', 'us', 'our') is a private aesthetic clinic located at 28 Church Street, Weybridge, Surrey, KT13 8DX, United Kingdom. We are the data controller responsible for your personal information. You can contact our Data Protection Officer at: info@visagemedispa.co.uk.
What Personal Data We Collect
We collect personal data you provide directly to us, including: full name, date of birth, contact details (telephone, email, address), medical history and health information relevant to aesthetic treatments, photographs (with consent) for clinical records and progress tracking, payment information (processed securely via third-party processors, as we do not store card details), and enquiry and correspondence records. We also collect technical data when you use our website, including IP address, browser type, pages visited, and cookies (see our Cookie Policy).
How We Use Your Data
We use your personal data to: provide and administer aesthetic treatments and clinical services; manage appointments and send appointment reminders; process payments; send you information about treatments, offers and events where you have consented; respond to enquiries; comply with legal and regulatory obligations including CQC requirements; and improve our website and services. We process health data on the basis of explicit consent and for the provision of medical services under Article 9(2)(h) of the UK GDPR.
Data Sharing
We do not sell your personal data. We may share your data with: trusted service providers who assist in running our business (e.g., booking systems, payment processors, email platforms), subject to data processing agreements; professional referrers such as GPs or consultants where clinically appropriate and with your consent; regulatory bodies such as the CQC where required by law; and insurers in the event of a claim. We do not transfer your data outside the UK/EEA without appropriate safeguards.
Your Rights
Under UK GDPR you have the right to: access your personal data (Subject Access Request); correct inaccurate data; request erasure (the 'right to be forgotten') where data is no longer necessary; restrict processing in certain circumstances; data portability; and object to processing for direct marketing at any time. To exercise any right, email info@visagemedispa.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Data Retention
Medical and clinical records are retained for a minimum of 8 years following the last appointment (or until age 25 for records relating to treatment of minors), in line with NHS and medical defence guidance. Marketing consent records are retained for 3 years. Website analytics data is retained for 26 months.
Contact
Data Protection Officer: info@visagemedispa.co.uk | Visage Medispa, 28 Church Street, Weybridge, Surrey, KT13 8DX.
If you have any questions about this privacy policy, please contact us at info@visagemedispa.co.uk or write to us at Visage Medispa, 28 Church Street, Weybridge, Surrey, KT13 8DX.