How AesthetiClinic handles your data on clinic booking websites

Who is responsible for your data

The clinic you book with is the controller of your personal data. It decides what information to collect and how it is used.

AesthetiClinic, run by MAP001 Ltd t/a AesthetiClinic (company number NI739048), provides the clinic's booking and clinic-management software. We are the clinic's processor. We handle your data only to provide that software and only on the clinic's instructions, under a written Data Processing Agreement. We do not sell your data or use it for our own marketing.

What is processed when you book

Depending on what the clinic asks for, this can include:

• your name and contact details, such as your email address and phone number;
• your booking: the treatment, time, practitioner and any notes you add;
• deposits and payments (card payments are handled by the payment provider on the clinic's own account; card numbers are not stored by AesthetiClinic);
• health information and consent forms, where the clinic asks for them before treatment;
• the emails and text messages the clinic sends you, such as confirmations and reminders;
• basic technical information, such as your IP address and browser, needed to run the site securely.

Keeping it secure

We protect your data with technical and organisational measures suited to health information. Each clinic's data is kept separate from every other clinic's, data is encrypted when it travels over a network, and access is limited to the people who need it. More detail for clinics is on our security page.

Where your data is held

The booking software and its database run on infrastructure in the EU (Germany). Some of the services we use to deliver it, such as email and text-message delivery, may process data outside the UK and EEA. Where they do, the transfer is covered by an appropriate safeguard, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

Other companies involved

We use a small number of carefully chosen service providers (sub-processors) to run the software, for example for hosting, payments and sending messages. Each is bound by data-protection terms at least as protective as ours. The full, current list, with what each does and where, is in the Annex to our Data Processing Agreement.

Cookies

Booking websites use a small number of cookies that are needed for booking to work, for example to confirm the code we email you. They are not used for advertising.

Your rights

You have rights over your data under UK data-protection law, including to see a copy of it, to have it corrected or deleted, and to object to how it is used. Because the clinic is the controller, please make your request to the clinic, using the contact details on its booking website. We will help the clinic respond.

If you contact us instead, we will pass your request to the clinic. You can reach us at hello@aestheticlinic.io. You can also complain to the Information Commissioner's Office (ico.org.uk).

Changes

We may update this page from time to time. The date at the top shows when it last changed.