Last updated: August 29, 2026
1. Who We Are
Dr Mallinder Aesthetics (drmallinderaesthetics.co.uk) operates as a data controller. We are committed to protecting and respecting your personal privacy when you use our website and book services with us.
2. What Information We Collect
When you use our online booking system (powered by Amelia), we collect personal data necessary to schedule and deliver your treatments safely. This includes:
- Contact information: Name, email address, phone number.
- Appointment details: Treatment history, booking dates, selected services, and notes.
- Payment/Financial data: Transaction records (processed securely via our payment gateways).
- Intake details: Any health, medical background, or consent notes provided prior to treatment.
3. How We Use Your Information
We process your personal data to:
- Manage, confirm, and remind you of your appointments.
- Maintain clinical safety records and treatment histories.
- Process payments, deposits, and refunds.
- Comply with legal, regulatory, and insurance obligations.
4. Data Retention & Security
Your data is securely stored on encrypted database servers and accessed only by authorized staff. We retain your booking and clinical treatment records only for as long as required by UK law and medical insurance policies.
5. Your GDPR Rights
Under UK GDPR, you have rights regarding your personal data, including:
- The right to access the personal data we hold about you.
- The right to request correction of inaccurate data.
- The right to request erasure (“Right to be forgotten”) via our patient portal or by contacting us directly, subject to regulatory clinical retention requirements.
6. Contact Us
For any privacy inquiries or to exercise your data rights, please contact us directly through the contact options on drmallinderaesthetics.co.uk.