Privacy Policy

Last updated: 16 October 2026

Nova Beauty Clinic Ltd ("we", "us") runs a medical aesthetics clinic at 260 East End Road, East Finchley, London N2 8AU. We are the data controller for the personal data described here. We are registered with the Information Commissioner's Office, registration number ZC275293.

Contact: info@novabeautyclinic.com · 020 3925 1232

What we collect

Contact details: your name, email, phone number, address and date of birth.
Booking details: appointments, treatments booked, payments and receipts.
Health information: medical history, medicines you take, allergies, consultation notes, signed consent forms and clinical photos taken for your record.
Product orders: what you buy from our shop and where we deliver it.
Messages you send us by email, phone, WhatsApp, our website form or social media.
Website data: pages visited, device and browser type, collected through cookies.

Why we use it, and our legal basis

To book, provide and follow up your treatment, and to sell and deliver products you order. Legal basis: contract.
To assess whether a treatment is safe for you and keep your clinical record. Health information is special category data, and we use it for the provision of health care under the duty of confidentiality that applies to clinical staff.
To keep records we are required to hold for clinical, tax and insurance purposes. Legal basis: legal obligation.
To use your photos in marketing (website, social media, adverts). We only do this with your separate written consent, and you can withdraw it at any time. We will stop using the photo in new material from then on.
To send you offers and news by email, text or WhatsApp. We only do this if you opt in, and every message tells you how to stop.
To run, secure and improve our website and measure how our adverts perform. Legal basis: legitimate interests, and your consent where cookies need it.

Our website uses cookies that it needs to work, such as keeping items in your basket. We use analytics and advertising cookies (for example from Google and Meta) only if you accept them in the cookie banner. You can change your choice at any time in the banner or in your browser settings.

Who we share it with

We never sell your data. We share it only where needed, with:

Wix (website, online booking, shop and payments)
Booking platforms you choose to book through, such as Treatwell and Fresha
Our online consent form service
Payment providers who process your card
Google (email, calendar and documents) and Meta (WhatsApp messages)
Our accountants, insurers and professional advisers
Other clinicians, such as a GP or surgeon, when you need a referral. We tell you first.
Regulators, the police or courts, when the law requires it

These providers act under contract and may only use your data to provide their service to us. Some of them store data outside the UK. Where they do, the transfer is protected by UK approved safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

Social media and YouTube

We publish our own content to Instagram, Facebook, TikTok, Pinterest and YouTube using a scheduling tool. We use YouTube API Services to upload videos to our own YouTube channel and to read view statistics for those videos. We do not collect data about YouTube viewers through this. By watching our YouTube channel you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google explains how it handles data in the Google Privacy Policy (https://policies.google.com/privacy). You can remove any app's access to your Google account at https://myaccount.google.com/connections.

When you message us or comment on our social media pages, the platform's own privacy policy also applies.

How long we keep it

Clinical records: 8 years after your last treatment. If we treated you before you turned 18, until your 25th birthday or 8 years after your last treatment, whichever is later.
Booking, order and payment records: 6 years, for tax purposes.
Marketing consent and photo consent records: until you withdraw consent, then a record that you withdrew it.
Website enquiries that do not lead to a booking: 2 years.

How we protect it

Access to client records is limited to the staff who need them. Our systems are password protected with two step sign in where available, and paper records are kept locked at the clinic.

Under 18s

We do not offer cosmetic injectable treatments to anyone under 18. For other treatments, we may need a parent or guardian's consent and details.

Your rights

You can ask us to:

give you a copy of your data
correct anything that is wrong
delete your data, unless we must keep it by law
restrict or object to how we use it
send your data to you or another provider in a usable format
stop using your data for marketing

You can withdraw any consent you have given at any time. Email info@novabeautyclinic.com and we will reply within one month. We may ask you to confirm your identity first. There is no charge.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or 0303 123 1113.

Changes

We will post any changes on this page with a new date.