1. Data Controller
The data controller responsible for your personal data is: Aesthetics of The Royal Liver Building The Royal Liver Building, Pier Head, Liverpool, Merseyside, L3 1HU hello@aestheticsoftheroyalliverbuilding.co.uk

2. Information We Collect
We may collect:

• Personal identification details (name, contact information, date of birth)
• Medical history and lifestyle information relevant to aesthetic treatments
• Consultation notes and treatment records
• Photographs taken for assessment and treatment planning (with consent)
• Appointment and communication records
• Payment and billing details
• Website usage data and cookies

Medical information is treated as special category data and handled with appropriate safeguards.

3. How We Use Your Information
We use your data to:

• Provide aesthetic consultations and non-surgical treatments
• Create and personalise treatment plans
• Manage appointments and communication
• Maintain clinical records
• Process payments
• Improve service quality and experience
• Comply with legal and regulatory obligations

4. Lawful Basis for Processing
We process your data under:

• Consent
• Contract
• Legal obligation
• Legitimate interests

For health-related data, additional lawful conditions apply under UK GDPR for the provision of healthcare.

5. Confidentiality and Clinical Governance
All personal and medical information is treated as confidential. Access is limited to authorised clinicians and staff involved in your care. We follow clinical governance procedures to ensure data is handled securely and appropriately.

6. Sharing Your Information
We may share your data with:

• Clinicians and staff involved in your treatment
• Administrative and support teams
• IT systems and service providers
• Payment processors
• Regulatory authorities where required
• Professional or legal advisors if necessary

We do not sell or share personal data for marketing purposes.

7. Data Security
We implement appropriate safeguards to protect your data from unauthorised access, loss, or misuse.

8. Data Retention
Personal and medical data is retained in accordance with legal and professional requirements and stored securely for as long as necessary.

9. Your Rights
You have the right to:

• Access your data
• Request corrections
• Request deletion (where applicable)
• Restrict or object to processing
• Withdraw consent (where applicable)
• Request data portability

10. Complaints
If you have concerns, please contact us. You also have the right to complain to the ICO: https://ico.org.uk

11. Cookies
Cookies are used to improve website functionality and analyse traffic. You can manage cookies through your browser settings.

12. Updates
This policy may be updated from time to time.

13. Contact Us
Please use the contact details on our website for any privacy-related enquiries.