1. Introduction

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, make an enquiry, or receive treatments at our clinic.We are committed to safeguarding your privacy and complying with the UK GDPR (effective 1 January 2021), the Data Protection Act 2018, and the Data Use & Access Act 2025.

2. Who We Are

Maidstone Electrolysis & Laser Clinic & The Maidstone Massage Centre Located in Maidstone, Kent.

We are the data controller, meaning we decide how and why your personal data is processed.

If you have any questions about this policy, you can contact us at: enquiries@maidstone-laser.co.uk

3. Data We Collect

We collect the following categories of personal data to provide safe, effective treatments and operate our clinic professionally:

Identity & Contact Information, Full name, Address, Email address, Phone number, Date of birth, Emergency contact details, Health & Medical Information (Special Category Data), Medical history, Allergies, Medications, Contraindications, Skin type assessments, Patch test results, Treatment notes, Clinical photographs, Treatment & Appointment Information, Appointment history, Consultation forms, Consent forms, Treatment plans, Aftercare notes, Communication records relating to your treatment, Payment & Transaction Information, Payment method (processed securely by our payment provider), Invoices and receipts, Refund records, Marketing & Communication Preferences, Newsletter opt‑in, Preferred contact method, Feedback or review submissions, Website & Digital Data, Contact form submissions, Online booking details, IP address, Cookies and analytics data.

4. How We Use Your Data

We use your data to: Provide safe and appropriate treatments, Manage bookings and communicate with you, Maintain accurate clinical records, Process payments and issue receipts, Send appointment reminders, Respond to enquiries, Improve our website and services, Comply with legal, regulatory, and insurance obligations

5. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases: Consent — for marketing communications and clinical photographs, Contract — to provide treatments and manage appointments, Legal obligation — for accounting, insurance, and regulatory requirements, Vital interests — in rare cases involving emergency contact, Legitimate interests — for business operations, service improvement, and website analytics, Special category condition (Article 9) — health data processed for the provision of treatment

6. How We Store & Protect Your Data

We use secure digital systems and industry‑standard safeguards to protect your information, including: Encrypted devices, Secure booking and payment platforms, Restricted staff access, Regular data protection reviews, Secure clinical record storage, We never sell your data.

7. How Long We Keep Your Data

We retain data only for as long as necessary: Clinical records: 7 years (or longer if required for insurance or legal purposes), Financial records: 6 years (HMRC requirement), Marketing data: until you withdraw consent, Website analytics: typically 12–24 months

8. Sharing Your Data

We may share your data with: Payment processors, Booking system providers, Insurance companies (if required), Legal or regulatory authorities (only when legally required), We do not share your data with third‑party marketers.

9. Your Rights

Under UK GDPR, you have the right to: Access your data, Correct inaccurate data, Request deletion

Restrict processing, Object to processing, Withdraw consent, Request data portability, To exercise any of these rights, contact us using the details above.

10. Cookies & Website Tracking

Our website uses cookies to: Improve performance, Analyse visitor behaviour, Support online booking functionality, You can manage or disable cookies in your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time.The latest version will always be available on our website.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: enquiries@maidstone-laser.co.uk