Privacy policy

Dr Nick Medical Aesthetics ("we", "us", "our") is a doctor-led aesthetics clinic based at The Annexe, Carr Gate Garden Centre, Wakefield, West Yorkshire, WF2 0SY. We are the data controller for the personal information described in this policy.

For anything relating to your privacy, email nick@drnicksinden.co.uk. Our registration with the Information Commissioner's Office (ICO) is [ICO registration number].

• Enquiry details. Your name, phone number, email address, preferred contact method, the treatment you are interested in, your preferred day and time, how you heard about us, any message you write, and whether you ticked the marketing consent box.
• Correspondence. Emails, calls and messages between us.
• Website analytics. If you accept analytics cookies, anonymised usage data such as pages viewed, approximate location, device and browser, and which buttons were clicked.

Please do not include detailed medical information in the enquiry form. Email is not a secure channel, and anything clinical is best discussed at your consultation.

When you submit the enquiry form, the details are validated and then sent by email in two places: a notification to the clinic inbox, and a confirmation email back to the address you provided.

Your enquiry is not saved to a website database. This website has no customer database and stores nothing about you on our servers. The only lasting record is the emails themselves, held in our clinic mailbox, plus the short-term sending logs kept by our email delivery provider, Resend, who send the emails on our behalf.

If you go on to book a treatment, your clinical records are then created and held separately within our clinic systems, under the usual medical confidentiality standards.

• To respond to your enquiry and arrange a consultation. Lawful basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to enquiries.
• To provide care and keep accurate records. Lawful basis: contract, and for any health information, the provision of healthcare by a professional bound by confidentiality.
• Marketing, only where you have ticked the consent box. Lawful basis: consent, which you can withdraw at any time.
• Analytics cookies. Lawful basis: consent.
• Legal and regulatory obligations, including professional standards and insurance.

• Enquiries that do not lead to treatment: kept for up to 12 months, then deleted.
• Patient records where treatment is provided: retained for 8 years after your last treatment, in line with medical records retention guidance (longer for patients under 18, until their 25th birthday).
• Marketing consent records: kept while you remain subscribed, plus a short period afterwards to evidence your preference.

We never sell your information. We share it only with organisations that help us run the clinic and this website:

• Our website hosting provider.
• Resend, our email delivery provider.
• Google Analytics, if you accept analytics cookies.
• Professional, regulatory or legal bodies where we are required to disclose information, and our insurers or advisers where necessary.

Some of these providers process data outside the UK. Where that happens, transfers are covered by UK adequacy regulations or standard contractual clauses with additional safeguards.

We use a small number of essential cookies needed to run the site, and Google Analytics 4 to understand how visitors use it. Analytics cookies only load after you press Accept on our cookie banner. If you decline, no analytics scripts run and no analytics cookies are set.

Google Analytics collects anonymised information such as pages viewed, time on page, approximate location and the device you use. It does not tell us who you are.

Under UK GDPR you have the right to:

• Ask for a copy of the information we hold about you.
• Have inaccurate information corrected.
• Ask us to delete information, where we are not required to keep it.
• Ask us to restrict or object to how we use it.
• Ask for your information in a portable format.
• Withdraw consent at any time, including for marketing and analytics.

To exercise any of these, email nick@drnicksinden.co.uk. We respond within one month. If you are unhappy with our response you can complain to the ICO at ico.org.uk.

We use reputable providers, encrypted connections and access controls, and limit access to those who need it. No method of transmission is completely secure, so please avoid sending sensitive medical detail by email or through the website form.

Our treatments and this website are intended for adults. We do not knowingly collect information from anyone under 18 without the involvement of a parent or guardian.

We may update this policy from time to time. The date at the top shows when it was last revised, and any significant changes will be highlighted on this page.