DermAesthetics

Privacy Policy

How we collect, use, and keep your personal data secure.

Last updated July 08, 2026

Justyna Martin trading as DermAesthetics is a registered Operating Department Practitioner with the Health and Care Professions Council (HCPC) under registration number: ODP36761.

This Privacy Notice for Justyna Martin (doing business as DermAesthetics ) ('we', 'us', or 'our'), describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you:

  • Visit our website at www.clinic-dermaesthetics.co.uk or any website of ours that links to this Privacy Notice
  • Engage with us in other related ways, including any web inquiries, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at clinic.dermaesthetics@gmail.com.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, such as when you fill out our contact form. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? Yes. Because we offer specialized medical aesthetic treatments (including Anti-Wrinkle treatments, Dermal Fillers, Profhilo, and Vitamin infusions), any health histories, allergies, or medical details you choose to share within your form message are classified as Special Category Data under UK GDPR and are protected with enhanced security protocols.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to deliver and answer your service inquiries, communicate with you regarding consultations, prevent fraud, and comply with medical-legal obligations. We do not use automated profiling or accounts. Learn more about how we process your information.

In what situations and with which parties do we share personal information? We do not sell your data. We share information only with trusted processors essential to running our business—specifically Google LLC, which safely hosts our incoming secure email communications.

How do we keep your information safe? We use organizational and technical processes (including TLS/SSL encryption on our web forms and secure, authenticated email endpoints) to protect your details. However, no transmission over the internet can be guaranteed 100% secure, so data submission is at your own risk.

What are your rights? Because you are interacting with a UK entity, you are fully protected by the UK GDPR. This gives you the right to access, correct, or request erasure of the personal data we hold about you. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by visiting www.clinic-dermaesthetics.co.uk/contact, or by emailing us at clinic.dermaesthetics@gmail.com.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

2. HOW DO WE PROCESS YOUR INFORMATION?

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

5. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

6. HOW LONG DO WE KEEP YOUR INFORMATION?

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

8. DO WE COLLECT INFORMATION FROM MINORS?

9. WHAT ARE YOUR PRIVACY RIGHTS?

10. CONTROLS FOR DO-NOT-TRACK FEATURES

11. DO WE MAKE UPDATES TO THIS NOTICE?

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you explicitly type into our website.

We collect basic contact details that you voluntarily submit to us through our online web forms when you express interest in booking a consultation, obtaining treatment parameters, or asking a medical aesthetics question.

The data collected through our contact form includes:

  • Names
  • Email addresses
  • Phone numbers (optional)
  • Message content (any personal details, histories, or contextual queries you type out)

Sensitive Information (Special Category Data)

Because our clinic provides medical-grade aesthetic procedures, any mention of your personal health metrics, skin issues, underlying conditions, or allergies in your free-text message box is strictly classified as health data. We process this under enhanced confidentiality regulations, and by checking our submission terms, you grant explicit consent for us to view this to assess your preliminary treatment eligibility.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to reply to your secure messages, assess basic treatment suitability before you book, and comply with clinical regulations.

We process your personal information for specific business reasons, depending entirely on your interactions with our contact form:

  • To respond to user inquiries and offer support: We process your name, contact details, and message context via email to accurately answer your questions and manage customer service pathways.
  • To deliver and facilitate delivery of services: If your inquiry results in an appointment booking, your contact information forms the baseline of your clinic client file.
  • To protect our Services: We monitor raw system logs through our email infrastructure to prevent spam, malicious form submissions, or fraudulent tracking attacks.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we have a valid legal reason under UK GDPR law—specifically explicit consent, contractual preparation, and healthcare requirements.

Under the UK General Data Protection Regulation (UK GDPR), our legal framework for handling your standard and sensitive data relies on:

  • Consent (Article 6(1)(a)): You give us explicit permission to process your data the moment you intentionally submit your details through our web form. You can choose to withdraw this consent at any point by emailing us directly.
  • Performance of a Contract / Pre-contractual steps (Article 6(1)(b)): Processing your contact parameters is required to organize initial timelines, coordinate clinical bookings, or supply pricing specifications requested by you.
  • Provision of Healthcare (Article 9(2)(h)): For any health or medical parameters provided inside your messages, we process this under strict confidentiality guidelines because it is legally necessary for evaluating health security before administering medical aesthetic procedures.
  • Legal Obligations (Article 6(1)(c)): We retain certain data metrics where required to comply with UK medical insurance requirements, financial reporting, or professional regulatory audits.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We do not pass your details to marketing companies. Your data is only transferred to our core trusted operational service platform.

We share your personal information exclusively in the following scenario:

  • Third-Party Infrastructure Processors: Our web forms automatically convert submissions into secure transactional emails delivered to our clinic endpoint managed by Google LLC (Gmail). Google operates strictly as a data processor on our behalf, bound by rigid data preservation boundaries.

5. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: Yes, your form data is routed internationally to the United States because our communication channel runs via Google’s secure cloud services.

While our clinic operations and servers are rooted within the United Kingdom, our core communication layer utilizes Google (Gmail). This means the text data you submit through our online contact form will be processed and stored securely across Google data hubs located in the United States.

To preserve legal alignment with UK laws, these transfers are fully protected by the European Commission's and UK approved Standard Contractual Clauses (SCCs). These clauses legally bind international data receivers to maintain security frameworks equivalent to the data protections enforced across the United Kingdom.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep general website inquiries for a short period, but if you undergo a medical aesthetic treatment, we are legally required to hold onto your clinical records for up to 10 years.

We maintain your personal information only for the maximum duration required to satisfy clinical safety laws, tax reporting mandates, and insurance coverage constraints:

  • General Web Inquiries: Form submissions that do not progress into a clinic booking are safely deleted after 2 years.
  • Clinical and Treatment Records: If you undergo treatments at our clinic (such as Anti-Wrinkle injections or Fillers), our specialized medical malpractice insurance policies and UK guidelines require us to store your medical consult strings and treatment logs for a minimum of 8 to 10 years after your final session.
  • Financial Data: Basic transaction logs are kept for 6 years to satisfy HMRC tax regulations.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We utilize clean security layers to shield your contact form entries, but internet routing always carries a minor degree of risk.

We have deployed appropriate and reasonable technical barriers to lock down your data. Our website utilizes HTTPS/TLS encryption layer protocols to safeguard all text entries passing from your browser to our cloud email server. While we maximize efforts to safeguard your incoming messages on our end, no digital system can be fully certified as impenetrable. Transmission of personal details is executed at your own risk, and you should ensure you are always interacting with our forms inside a secure browsing environment.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not perform aesthetic treatments on or collect data from individuals under 18 years of age.

We do not knowingly process data or offer medical aesthetic treatments to children under 18 years of age. By submitting an inquiry via our web forms, you confirm that you are at least 18 years old. If we detect that a submission contains data belonging to an individual under 18, we will immediately delete the email and clear all trace metrics from our systems. If you have reason to believe we have accidentally received data from a minor, please contact us at clinic.dermaesthetics@gmail.com.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Under UK GDPR rules, you possess full authority over accessing, checking, and wiping your personal database records.

Because you are interacting with a registered UK business entity, you hold specific, powerful rights under the UK Data Protection Act. These include the right to: (i) request clear visibility and copies of your personal information, (ii) request immediate rectification of errors, (iii) enforce complete data erasure ("the right to be forgotten"), or (iv) restrict or object to certain ways your details are handled.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most modern web browsers contain an embedded Do-Not-Track ('DNT') toggle feature that lets you send a signal expressing your choice not to have web activities logged. Because our simple informational website does not host tracking pixels, third-party analytics engines, or behavioral advertising cookies, our systems do not modify behaviors based on automated browser DNT codes. Your simple contact interaction remains isolated from commercial cross-site tracking systems.

11. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will modify these clauses as needed to maintain structural alignment with evolving UK healthcare laws.

We may refresh this Privacy Notice periodically. Any updated variant will be marked clearly by a revised date stamps visible at the peak of this document page. If we introduce material structural adjustments to how your information is handled, we will communicate these changes transparently by hosting a visible notice banner across our website. We suggest checking this page frequently to keep up-to-date with how we insulate your records.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have any constructive questions or technical comments regarding this notice layout, you can easily contact us directly via email at clinic.dermaesthetics@gmail.com or send a letter to our official business address:

Justyna Martin
3 Austen Ave
Stone Cross
Pevensey, East Sussex BN24 5FQ
United Kingdom

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on UK data protection rules, you can request direct access to the personal metrics we hold, request corrections to errors, or command total data erasure from our active mail databases. If you wish to review, update, or completely purge your submitted form emails from our data systems, please file your request directly by visiting: www.clinic-dermaesthetics.co.uk/contact or contact our security administrator directly at clinic.dermaesthetics@gmail.com.