Privacy Policy

  1. Introduction

Welcome to Kiss Kiss Aesthetics (“we,” “our,” “us”). We are committed to protecting your privacy and handling your personal data responsibly in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit www.kisskissaesthetics.co.uk (“Website”) or use our medical aesthetic services.

As a medical aesthetics provider, we may process sensitive personal data (such as health information) with your explicit consent.

  1. What Data We Collect

We collect and process the following types of personal data:

  1. Information You Provide to Us:
  • Personal details – Name, date of birth, gender, contact details (email, phone, address).
  • Medical history – Pre-existing conditions, allergies, previous treatments, and medications (to assess suitability for treatments).
  • Treatment records – Consultation notes, before/after photos, and progress
  • Payment details – Transaction data (we do not store full payment card details).
  • Marketing preferences – Your consent to receive promotional
  1. Information Collected Automatically:
  • Technical data – IP address, browser type, and device
  • Website usage – Pages visited, time spent on the Website, and referral
  • Cookies and tracking – See our Cookie Policy for
  1. How We Use Your Data

We use your personal data for the following purposes:

  • To provide safe and effective medical aesthetic
  • To assess medical suitability before
  • To store and update your treatment
  • To communicate appointment confirmations and
  • To process payments and issue
  • To respond to enquiries or
  • To comply with legal and regulatory
  • To send promotional offers and newsletters (if you have consented).
  1. Legal Basis for Processing Your Data

Under UK GDPR, we process your data based on the following legal grounds:

  • Explicit consent – When processing sensitive health data, we will obtain your clear
  • Contractual necessity – To provide the services you
  • Legal obligation – To comply with UK healthcare
  • Legitimate interest – To manage our business effectively and improve our

 

  1. How We Store and Protect Your Data

We take the security of your personal data seriously and implement the following safeguards:

  • Secure digital storage – Encrypted systems for medical and customer
  • Access control – Only authorised staff can access your personal
  • Data minimisation – We only collect necessary
  • Retention policy – Medical records are stored for a minimum of 7 years, in line with UK healthcare

 

  1. How We Share Your Data

We do not sell or rent your data. However, we may share it with:

  • Healthcare professionals – If a referral is
  • Regulatory authorities – If legally required (e.g., CQC, MHRA, ICO).
  • Service providers – Payment processors, booking systems, or email marketing

All third-party service providers are UK GDPR-compliant and only process your data under our instructions.

  1. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right to access – Request a copy of your personal
  • Right to rectification – Request corrections to inaccurate or incomplete
  • Right to erasure – Request deletion of your data (subject to medical record retention laws).
  • Right to restrict processing – Request to limit how we use your
  • Right to data portability – Request your data in a usable
  • Right to object – Object to processing based on legitimate
  • Right to withdraw consent – Withdraw your consent at any time (for marketing). To exercise your rights, please contact us at info@kisskissaesthetics.co.uk.
  1. Marketing Communications

We will only send marketing emails or SMS messages if you have given explicit consent. You can unsubscribe at any time by clicking the “unsubscribe” link in our emails or by contacting us directly.

  1. Cookies and Tracking Technologies

We use cookies to enhance user experience and analyse Website traffic. You can manage cookie preferences through your browser settings. See our Cookie Policy for more details.

  1. Third-Party Links

Our Website may contain links to third-party websites (e.g., product suppliers, industry associations). We are not responsible for their privacy policies. Please review their policies before providing personal data.

  1. Updates to This Policy

We may update this policy periodically. Any changes will be posted on this page with a revised “Last Updated” date.

  1. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Kiss Kiss Aesthetics 40, Church Mead

Roydon, Essex, CM19 5EY Phone: 07932045306

Email: info@kisskissaesthetics.co.uk Website: www.kisskissaesthetics.co.uk