We may collect and process the following types of personal information:

Contact details: Your name, address, phone number, and email address.

Medical and health information: Relevant medical history, allergies, and lifestyle information required to safely provide treatments.

Payment details: Processed securely by third-party payment providers; we do not store full card details.

Appointment details: Treatment history, preferences, and notes for your care.

Marketing preferences: Your consent to receive communications from us.

Website data: IP addresses, browser type, and cookies (if you visit our website).

We only use your personal data for:

Booking and managing appointments.

Providing safe, personalised treatments.

Communicating with you about appointments, aftercare, or changes to services.

Processing payments securely.

Sending marketing or promotional messages (only with your explicit consent).

Meeting our legal, tax, and regulatory obligations.

We process your data under the following lawful bases:

Consent: For marketing communications and storing sensitive medical information.

Contract: To deliver the treatments and services you have booked.

Legal obligation: To comply with insurance, health, and safety regulations.

Legitimate interests: To provide and improve our services.

Your data is stored securely in compliance with UK GDPR.

Paper records are kept locked, and digital records are encrypted and password-protected.

Only authorised staff have access to your data.

We do not sell or rent your data. We may share data only with:

Payment processors (to complete transactions).

Insurers or regulatory bodies (if legally required).

Service providers (e.g., booking systems, email platforms) under strict confidentiality

We will keep your data:

Medical and treatment records: For 7 years after your last treatment (or until age 25 if under 18), as required by UK regulations.

Marketing data: Until you withdraw consent.
You can request deletion of non-essential data at any time.

You have the right to:

Access your personal data.

Correct inaccurate information.

Request deletion (where legally possible).

Withdraw consent for marketing.

Request a copy of your data (data portability).

Make a complaint to the Information Commissioner’s Office (ICO) if you believe your data is not being handled lawfully.

For more information, visit www.ico.org.uk.

Our website may use cookies to improve user experience and track performance. You can disable cookies in your browser settings.

If you have any questions or want to exercise your privacy rights, please contact:

Tila Malik Aesthetics Clinic, 2 Pearson Lane, Unit, Bradford, BD9 6NN

e: info@tilamalik-aesthetics.co.uk