Privacy Policy

Trusted Touch Aesthetics, 343 Fulham Palace Road, London SW6 6TD, is the controller of the personal information described here. You can contact us about anything in this policy at info@trustedtouchaesthetics.london or on 07912 600127.

Trusted Touch Aesthetics is based at Banana Beauty Lab, 343 Fulham Palace Road. Appointment requests and our consultation, medical history and consent forms are handled through Banana Beauty Lab’s systems, and are used only to arrange and deliver your treatment.

Appointment requests. When you use the request form we collect your name, mobile number, email address, the treatment you are interested in, your preferred and alternative dates and times, anything you choose to tell us in the free-text box, and the page you sent the request from. You may also choose to attach up to five photographs.

Health information and photographs. Details you give us about your health, skin or medical history, and photographs of your face or body, are “special category” data under UK data protection law. We only receive them if you choose to send them, and only with your explicit consent, which you give by ticking the consent box on the form.

When you contact us in other ways. If you phone, email or message us on WhatsApp we keep the details you give us so we can reply and arrange your appointment.

Clients. If you go on to have treatment, we keep the consultation, consent and treatment records needed to treat you safely. You will be given further information about these records at your consultation.

Technical information. To protect the request form from abuse we keep a one-way scrambled (hashed) version of your internet address, together with the times of your requests, for up to 24 hours. It cannot be read back into your address and is used for nothing else. Our hosting provider also keeps standard server logs for security purposes.

Your request is sent securely to the clinic by email. Photographs are held on our server only for the few moments it takes to send that email, and are then deleted; they are never stored on the website. Location and camera information embedded in photographs is removed when they are uploaded.

We send an acknowledgement email to the address you enter so you know we have received your request. It does not include your photographs or any health information.

We use your information only to:

• respond to your enquiry and arrange a consultation or appointment;
• assess whether a treatment is suitable for you and provide it safely;
• keep the records we need to meet our professional and insurance obligations;
• keep the website and request form secure.

Our lawful bases under UK GDPR are: taking steps at your request before entering into an agreement with you, and then performing that agreement (handling enquiries and providing treatment); your explicit consent for health information and photographs you send with an enquiry; the provision of health care, and the establishment or defence of legal claims, for clinical records once you are a client; our legitimate interests in running a safe, secure clinic and website; and legal obligations that apply to us.

You can withdraw your consent at any time by contacting us. This does not affect anything we did before you withdrew it.

We never sell your personal information or use it for advertising.

We share it only with the service providers we need to run the clinic — our website host, our email provider and the systems we use to manage appointments and records — who may only use it on our instructions. We may also share information where the law requires it, or with your GP or another health professional where this is necessary for your safety and, wherever possible, with your agreement.

If you choose to contact us on WhatsApp, your messages are handled by WhatsApp (Meta) under its own terms and privacy policy.

Some of our providers, such as our email provider and WhatsApp, may process information outside the UK. Where they do, we rely on the safeguards UK law requires, such as UK adequacy regulations or the UK International Data Transfer Agreement.

Enquiries that do not lead to an appointment are deleted within 12 months. If you become a client, your consultation and treatment records are kept for as long as professional guidance and our insurance require, and then securely destroyed. Rate-limiting data is deleted after 24 hours, and photographs sent through the form are deleted from our server as soon as they have been emailed to the clinic.

The website is served over an encrypted connection, the request form checks every submission on our server, and access to client information is limited to the people at the clinic who need it.

You have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that is inaccurate or incomplete;
• ask us to delete your information, where we are not required to keep it;
• ask us to restrict or stop using it, or object to how we use it;
• ask for information you gave us to be transferred to you or another organisation;
• withdraw your consent at any time.

To use any of these rights, contact us at info@trustedtouchaesthetics.london. We will respond within one month.

Our treatments are for adults aged 18 and over, and this website is not intended for children. We do not knowingly collect information from anyone under 18.

For information about cookies and similar storage on this website, see our cookies policy.

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

We may update this policy from time to time. The date at the top shows when it was last changed.