Privacy Policy

1. Introduction

Nadia Skin & Aesthetics (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal information when you use our website, book treatments, or interact with us.

2. Data We Collect

We may collect the following information:

• Name, email address, phone number, and date of birth
• Medical history and skin assessment details relevant to your treatment
• Booking and appointment history
• Payment information (processed securely via third-party providers)
• Photographs taken for treatment records and progress tracking
• Website usage data including cookies and analytics

3. How We Use Your Data

Your personal data is used to:

• Provide and manage your treatments and appointments
• Maintain accurate medical and treatment records
• Communicate appointment reminders and aftercare instructions
• Process payments securely
• Improve our services and website experience
• Comply with legal and regulatory obligations

4. Cookies

Our website uses cookies to enhance your browsing experience and analyse site traffic. Cookies are small text files stored on your device. You can control cookie settings through your browser preferences. We use essential cookies for site functionality and analytics cookies (such as Google Analytics) to understand how visitors use our site.

5. Third-Party Services

We use the following third-party services which may process your data in accordance with their own privacy policies:

• Fresha — Online booking and appointment management
• Google Analytics — Website traffic analysis and performance monitoring
• FacesConsent — Digital consent forms and finance applications
• WhatsApp / Meta — Client communication

6. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Medical records are retained in accordance with NHS guidelines and relevant healthcare regulations. You may request deletion of your data at any time, subject to our legal retention requirements.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent at any time

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All payment processing is handled by secure, PCI-compliant third-party providers.

9. Contact Us

If you have any questions about this privacy policy or wish to exercise your data rights, please contact us at: