Privacy Policy

Broadway Retreat Aesthetic Clinic ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal and medical information when you use our website and services, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Introduction

This policy applies to all visitors, patients and users of our website and clinical services. By using our website or booking an appointment with us, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We may collect the following types of information: your name, contact details (email, phone number, address), date of birth, appointment and booking history, payment information, and any information you voluntarily submit through our forms, such as the contact form. We may also collect technical information such as your IP address and browser type when you visit our website.

3. How We Use Your Information

We use the information we collect to schedule and manage appointments, provide clinical care and treatment, communicate with you about your care, process payments, respond to enquiries submitted through our contact form, and improve our website and services. We do not use your personal information for any purpose incompatible with these.

4. Medical Information

As a healthcare provider, we collect and process sensitive medical information as part of your care. This information is treated as strictly confidential, accessed only by authorised clinical staff involved in your treatment, and stored securely in accordance with applicable healthcare data protection standards.

5. Cookies

Our website may use cookies to improve your browsing experience, remember your preferences and understand how visitors use our site. You can control or disable cookies through your browser settings; however, this may affect certain features of the website.

6. Data Security

We take appropriate technical and organisational measures to protect your personal and medical information against unauthorised access, alteration, disclosure or destruction. Access to patient records is restricted to authorised personnel only.

7. Third Party Services

We do not sell or rent your personal information to third parties. We may share information with trusted third-party service providers who assist us in operating our website and delivering our services (such as payment processors), and only to the extent necessary for them to perform their functions, or where required by law.

8. Your Rights

Under UK GDPR, you have the right to access, correct, or request deletion of your personal information, to object to or restrict certain processing, and to request a copy of your data in a portable format. To exercise any of these rights, please contact us using the details below.

9. Contact Information

If you have any questions about this Privacy Policy or how we handle your information, please contact us via our Contact Us page.