Privacy policy

Kasey Bickers, sole trader trading as Nurse Kasey Aesthetics, is the controller for clinic and website enquiry information. Address: The Essentials Lounge, 23 Cranborne Parade, Mutton Lane, Potters Bar, EN6 3BA. Email: info@nursekaseyaesthetics.co.uk. Telephone: 07376 958058.

ICO registration number: [ICO REGISTRATION NUMBER TO BE SUPPLIED]. This notice is a draft pending confirmation of the operational details labelled below.

The contact form, gift voucher enquiry form and quick-contact widget collect the details you enter, such as name, telephone number, optional email, treatment interest and message. We use these to respond to your request and take steps at your request before a possible contract, under Article 6(1)(b) UK GDPR. General correspondence and security may rely on legitimate interests under Article 6(1)(f); the clinic must document the relevant assessment.

Please do not enter medical histories, photographs, test results or other detailed health information into website forms. Health information belongs in a separate, appropriate clinical consultation and record system. Submitting an enquiry does not sign you up to marketing. There is no automated SMS enquiry-reply feature implemented on this website.

Clinical consultation may involve health history, medication, contraindications, consent and treatment records. These are special category personal data, separate from ordinary website enquiries. An Article 6 basis and an Article 9 condition are both required.

[CLINICAL RECORD SYSTEM, ARTICLE 6 BASIS AND ARTICLE 9 CONDITION TO BE CONFIRMED]. Explicit consent under Article 9(2)(a) may be appropriate for a private clinic, but the actual condition and recording process must be confirmed before this draft is approved. Health-data consent must be specific and recorded separately from marketing or optional photography consent.

Replit hosts this website. Formspree receives submitted website enquiries. Treatwell provides the linked booking service and takes booking payments; payment card details are entered with the booking/payment provider and are not collected by this website’s enquiry forms. Stripe and Quantserve cookies were observed after the Treatwell service was loaded in testing; the clinic must confirm the contractual roles of those providers and any clinical record providers.

Google receives information when you choose to load the Google Maps embed. Treatwell receives information when you choose to load its booking embed or follow its external link. Their own privacy notices govern their independent processing. GoDaddy provides the domain service; [EMAIL PROVIDER TO BE CONFIRMED]. No standalone analytics provider, advertising pixel or online voucher payment service has been installed by this website; optional booking embeds may bring their own tracking. [ANY CLINIC MESSAGING APPS OR ADDITIONAL PROCESSORS TO BE CONFIRMED].

Some service providers may process information outside the UK. [PROVIDER LOCATIONS AND TRANSFER MECHANISMS TO BE CONFIRMED FOR REPLIT, FORMSPREE, GOOGLE, TREATWELL, EMAIL AND CLINICAL RECORD PROVIDERS]. Where required, the controller must identify the applicable adequacy regulation, UK International Data Transfer Agreement or UK Addendum and complete the relevant transfer assessment. This draft does not claim that an unverified safeguard is already in place.

Website enquiries: [ENQUIRY RETENTION PERIOD TO BE SUPPLIED]. Treatment, consultation and consent records: [CLINICAL RECORD RETENTION PERIOD TO BE SUPPLIED]. Payment/accounting records: [ACCOUNTING RETENTION PERIOD TO BE SUPPLIED]. Complaints records: [COMPLAINT RETENTION PERIOD TO BE SUPPLIED]. Hosting logs and Formspree/email copies: [PROVIDER RETENTION AND DELETION SETTINGS TO BE CONFIRMED].

Privacy choices stored by this website expire after 12 months or when the policy version materially changes. Information must not be retained beyond its applicable purpose and legal or insurance requirements. The specific periods above require approval rather than a guessed duration.

You may ask for access, correction, erasure, restriction, portability or object to processing where the relevant right applies. Where processing relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal. Contact info@nursekaseyaesthetics.co.uk or 07376 958058; sufficient identity checks may be needed to protect your records. Statutory exceptions may apply.

You can change optional website storage and embed choices using Cookie settings in the footer. No treatment eligibility decision is made automatically by this website and no website profiling system has been implemented. [CLINIC-WIDE AUTOMATED DECISION-MAKING POSITION TO BE CONFIRMED].

Email info@nursekaseyaesthetics.co.uk with the subject “Data protection complaint”, or use the postal address above. Describe your concern and the outcome you want without sending unnecessary medical details. You may also raise a concern by telephone. Kasey Bickers is the named internal contact.

Data protection complaints must be acknowledged within 30 days of receipt. Appropriate enquiries, progress updates and an outcome must follow without undue delay. These are legal requirements, not an invented clinic service-level promise. If you remain dissatisfied, ask Kasey to review the outcome and explain your right to escalate.

You may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Raising a concern with the clinic first can help resolve it but does not remove your statutory rights.