Privacy Policy and GDPR Statement

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Data Collection
Personal Information: We collect personal information that you provide to us, including your name, contact details, medical history, and payment information.
Usage Data: We may collect data on how you interact with our website and services, including IP addresses, browser types, and browsing history.

Data Use
Service Provision: Your personal information is used to provide and manage our services, including appointment scheduling, treatment records, and communication.
Communication: We may use your contact information to send appointment reminders, promotional offers, and service updates. You can opt-out of promotional communications at any time.
Improvement and Analysis: We may use anonymized data (data from which personal identifiers have been removed) to improve our services and conduct market analysis.

Data Sharing
Third-Party Services: We may share your information with third-party service providers who assist us in delivering our services (e.g., payment processors, IT support). These providers are bound by confidentiality agreements and are compliant with GDPR.
Legal Requirements: We may disclose your information if required by law or to protect our rights and safety.

Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, or damage. These measures include secure storage, encryption, and access controls.

Your Rights
Under GDPR, you have the right to:
Access: Request access to the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data, subject to certain conditions.
Restriction: Request restriction of processing your data.
Data Portability: Request transfer of your data to another organisation.
Objection: Object to the processing of your personal data.
Erasure: We are committed to protecting your personal data and your right to privacy. When contacted we will review your request and delete any information that we are not legally required to retain. Please note that due to legal and insurance obligations, certain treatment records must be retained for a period of 10 years from the date of treatment. We appreciate your understanding and assure you that all retained data is securely stored and managed in compliance with GDPR.
To exercise these rights, please contact us at info@bwmedaesthetics.co.uk

Changes to Terms and Conditions
We reserve the right to update these Terms and Conditions at any time. Changes will be posted on our website, and your continued use of our services constitutes acceptance of the updated terms.

Governing Law
These Terms and Conditions are governed by and construed in accordance with the laws of England and Wales. Any disputes arising from these Terms and Conditions shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Contact Information
If you have any questions about these Terms and Conditions, please contact us at:
Email: info@bwmedaesthetics.co.uk
Phone: 07301299989
Address: [Your Address]
Thank you for choosing BW Med Aesthetics. We look forward to serving you.