This policy explains how we collect, use, share and protect your personal information when you use this website, contact us, book an appointment or have a consultation or treatment with us. It also explains your rights and how to complain. We have tried to keep it in plain English. If anything is unclear, please contact us.
Rejuvence Aesthetics is a trading name of Facial Aesthetic & Cosmetic Enhancement Clinic Limited, which also trades as Rejuvence Clinic. The company is registered in England and Wales, company number 08717446. Our registered office is 36 Lichfield Street, Walsall WS1 1TJ. Our clinic is at Ground Floor Commercial Unit, Block E, 30 Indescon Square, Canary Wharf, London E14 9DR.
Facial Aesthetic & Cosmetic Enhancement Clinic Limited is the data controller for the personal information described in this policy. This means we decide how and why your information is used and we are responsible for protecting it. Our Information Commissioner's Office (ICO) registration number is ZA175838.
This policy covers www.rejuvenceaesthetics.co.uk and the services booked through it.
We handle personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, including by the Data (Use and Access) Act 2025. As a clinic we also follow the confidentiality duties that apply to doctors and other healthcare professionals.
This website does not have a contact form or a user account area. Our AI consultation asks pre-set questions and suggests treatments from your answers. It runs in your browser, and your answers are not stored or sent to us. You contact us by phone or email, or book online through our booking system on Pabau, which is a separate website.
If you choose to accept analytics or marketing cookies, we collect information about how you use this website, such as the pages you visit and whether you clicked through to book. We do not collect this information if you reject those cookies. See our cookie policy for details.
Our website host keeps standard technical logs (such as IP address, browser type and the time of a request) to run and protect the website.
We may receive information about you from your GP or other clinicians (with your permission), from finance providers if you apply for finance, and from our booking system when you book online.
We will ask about your health at your consultation, where it is recorded securely in your clinical record. Please avoid sending detailed medical information by email or message before your appointment. If you do, we will use it only to deal with your enquiry and prepare for your consultation.
The law says we must have a lawful basis for each use of your personal information (Article 6 of the UK GDPR). For health information we also need a condition under Article 9 of the UK GDPR.
| What we use it for | Lawful basis (Article 6) | Condition for health information (Article 9) |
|---|---|---|
| Replying to your enquiries by phone, email or message | Taking steps at your request before entering into a contract, or our legitimate interests in responding to people who contact us | If you share health information: provision of health care (Article 9(2)(h)) |
| Booking and managing appointments, taking deposits and payments | Contract | Not applicable unless health information is involved |
| Assessing whether a treatment is suitable, providing treatment, aftercare and follow-up, and keeping clinical records | Contract, and legal obligation where we must keep records | Provision of health care (Article 9(2)(h)), with Data Protection Act 2018 Schedule 1 paragraph 2. This information is handled by or under the responsibility of health professionals who owe you a duty of confidentiality. |
| Clinical photographs for your record | Contract | Provision of health care (Article 9(2)(h)) |
| Using your photographs or comments in our marketing | Consent | Explicit consent (Article 9(2)(a)) |
| Contacting your GP or another clinician about your care | Consent, or vital interests in an emergency | Explicit consent (Article 9(2)(a)), or vital interests (Article 9(2)(c)) in an emergency |
| Handling complaints, claims and requests from regulators such as the Care Quality Commission | Legal obligation and our legitimate interests | Legal claims (Article 9(2)(f)) and provision of health care (Article 9(2)(h)) |
| Sending marketing by email, text or message | Consent, or for existing patients the "soft opt-in" allowed by PECR, with our legitimate interests | Not applicable. We do not use health information for marketing. |
| Website analytics and advertising measurement | Consent (given through our cookie banner) | Not applicable |
| Keeping our systems secure, preventing fraud and improving our services | Our legitimate interests | Not applicable |
| Accounting and tax | Legal obligation | Not applicable |
Where we rely on legitimate interests, our interests are running the clinic, replying to people who contact us, keeping our systems secure and improving our services. We only rely on them where they are not outweighed by your rights and interests.
Whenever our reason for using your information is legitimate interests, you can object at any time to our use of your information. You can also object to direct marketing at any time, and we will stop. To object, use the contact details at the top of this policy.
We only send you marketing if you have agreed, or if you have been treated here before, the message is about similar treatments and you have not told us to stop. Every message will tell you how to unsubscribe. Making an enquiry or booking does not sign you up to marketing.
Clinical photographs form part of your medical record and are used to plan and review your treatment. They are not used for marketing. We will only use photographs or comments from you on our website, social media or in other marketing if you give separate, explicit written consent. You can withdraw that consent at any time. If you do, we will stop using them in new material and remove them from our website and the social media accounts we control.
We do not sell your personal information. We share it only where needed, with the organisations below. Service providers that handle information on our behalf (processors) may only use it on our instructions and under a written contract.
| Recipient | Why | Role | Location and safeguard |
|---|---|---|---|
| Pabau | Online booking, appointment management and patient records | Processor | Under a written data processing agreement |
| Our payment provider | Taking card payments and deposits | Processor or independent controller, depending on the service | Under the provider's terms and a written contract |
| Vercel | Hosting this website | Processor | May be processed in the United States. See "International transfers" below. |
| Google (Google Tag Manager, Google Analytics 4 and Google Ads) | Website statistics and advertising measurement, only if you accept cookies | Processor or independent controller, depending on the product | May be processed in the United States. See "International transfers" below. |
| SociableKit | Showing our Instagram posts on this website, only if you accept marketing cookies | Processor | May be processed outside the UK. See "International transfers" below. |
| Email and office software provider | Email and documents | Processor | Under a written contract |
| Finance provider | Only if you apply for finance | Independent controller | Under the provider's own privacy policy |
| Your GP and other clinicians | Your care, with your consent or where needed in an emergency | Independent controllers | UK |
| Our insurers, legal advisers and accountants | Running the business, handling claims | Independent controllers | UK |
| Regulators and authorities, such as the Care Quality Commission, the General Medical Council, the ICO, the police or courts | Where the law requires or allows it | Independent controllers | UK |
Our AI consultation runs in your browser and does not send your answers to us or to anyone else.
Some of our service providers may process information outside the UK, for example in the United States. When that happens we make sure the transfer is protected, by relying on UK adequacy regulations (including the UK-US data bridge, which covers US organisations certified under the UK Extension to the EU-US Data Privacy Framework) or on the ICO's International Data Transfer Agreement or Addendum. You can ask us for more information about these safeguards.
We keep personal information only for as long as we need it for the purposes in this policy, or as the law requires.
This website is served over an encrypted connection (HTTPS). We limit access to personal information to staff who need it, staff are bound by confidentiality, and our service providers work under written contracts.
You have the right to:
To use any of these rights, contact us using the details at the top of this policy. We will normally respond within one month, and it is normally free. We may need to confirm your identity first. If your request is complex, we may extend the time by up to two further months and will tell you why.
If you are unhappy with how we have handled your personal information, please tell us first so we can try to put it right. You can complain by email to info@rejuvenceclinic.co.uk, by phone on 020 7531 6600 or by post to the clinic address. We will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, and tell you the outcome. Our complaints policy explains the wider process.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection:
Our aesthetic treatments are only for adults aged 18 and over, and this website is not intended for children. We do not knowingly collect information from children through this website.
We only use analytics and marketing cookies if you agree. You can change your choice at any time using the "Cookie settings" link at the bottom of every page. Our cookie policy has the details.
This website links to other websites, including our booking system on Pabau, Google Maps, Instagram and the Care Quality Commission. Those websites have their own privacy policies, and we are not responsible for how they use your information.
We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, we will tell you where appropriate.
For questions about this policy or the way we use your information, please contact us, email info@rejuvenceclinic.co.uk or call 020 7531 6600.