Privacy Policy

This Privacy Policy explains how personal information is collected, used and protected by, and trading as Dr Bennett Aesthetics Clinics.
 

We are committed to handling personal data with care, respect and transparency, and we take our legal and ethical responsibilities seriously.

​

Who We Are

Legal entity & trading name: Dr Bennett Aesthetics Clinics

Registered address:
1st Floor, 51 Beauchamp Place, Knightsbridge, London SW3 1NY

​

Website: https://www.drbennettaestheticsclinics.com

​​

Privacy enquiries: izabella@izabellahughes.com

​

For the purposes of data protection law, we are the data controller.

​

Data Protection Contact

Our appointed Data Protection Contact is: Izabella Bennett
Contact: izabella@izabellahughes.com

​

Personal Data We Collect

 

We may collect and process the following types of personal data, depending on how you interact with us:

• Identity details such as name and date of birth

• Contact details such as email address, telephone number and address

• Appointment and enquiry information

• Health and medical information provided during consultations or treatment booking

• Payment and transaction details where relevant

• Website usage data, including IP address, device information and browsing behaviour

• Marketing preferences and consent records
   

Health and medical information is treated as special category data and handled with additional safeguards.
 

How We Collect Your Data

Personal data may be collected:

• When you complete forms on our website

• When you contact us by email, phone or online enquiry

• When you book or attend a consultation or treatment

• When you subscribe to marketing communications

• Through cookies and tracking technologies on our website
   

How We Use Your Data

Your personal data may be used to:

• Respond to enquiries and appointment requests

• Provide consultations and aesthetic treatments

• Maintain accurate client records

• Communicate appointment information and aftercare guidance

• Process payments and manage accounts

• Meet legal, regulatory and insurance obligations

• Improve our website, services and advertising performance

• Send marketing communications where consent has been given
   

We only use personal data where there is a lawful basis to do so.
 

Lawful Bases for Processing

Depending on the context, we rely on one or more of the following legal bases:

• Performance of a contract

• Legal obligation

• Legitimate interests

• Consent

• Provision of health or social care

Special category data is processed in line with UK GDPR requirements, including explicit consent or where necessary for healthcare provision.
 

Tracking

Our website uses tracking properties and similar technologies.

We use Google Ads conversion tracking to measure advertising performance and attribution. This may collect anonymised information about website usage and interactions with adverts.

​

Sharing Your Data

We may share personal data with trusted third parties where required, including:

• Website and IT service providers

• Booking, scheduling and administrative systems

• Payment processors

• Analytics and advertising platforms such as Google

• Professional advisers, insurers or regulators where required by law

We do not sell personal data.
 

International Data Transfers

Some third-party providers may process data outside the UK or European Economic Area.

Where this occurs, appropriate safeguards are in place, such as UK adequacy decisions, standard contractual clauses or equivalent protections.
 

Data Retention

We retain personal data only for as long as necessary:

• Client medical records are kept for 7 years from the last treatment

• Enquiry data is typically retained for 12 months

• Marketing subscriber data is retained until you unsubscribe or withdraw consent
   

Retention periods may be extended where required by law or professional obligations.
 

Your Rights

Under UK data protection law, you have rights including:

• The right to access your personal data

• The right to correct inaccurate data

• The right to request erasure in certain circumstances

• The right to restrict or object to processing

• The right to data portability

• The right to withdraw consent at any time

• The right to lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made by contacting us using the details above.
 

Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or disclosure.

Access to sensitive information is limited to authorised personnel only.
 

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in law, guidance or our practices.

The most recent version will always be available on our website.
 

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Email: izabella@izabellahughes.com
Address: 1st Floor, 51 Beauchamp Place, Knightsbridge, London SW3 1NY

Effective: 5th January 2026
Last Updated: 2nd January 2025