Privacy Policy

If you have questions about this Privacy Policy or how we use your personal information, please contact us at:

The AURM Clinic Email: contactus@aurmskin.com United Kingdom

Depending on how you interact with us, we may collect:

• Your name, email address, telephone number and other contact details.
• Information included in an enquiry or contact form.
• Appointment details, including the service requested, date, time and booking history.
• Health, medical, treatment and consultation information that you provide before or during an appointment.
• Photographs, where relevant to a consultation or treatment and collected with an appropriate lawful basis.
• Your communication and marketing preferences.
• Correspondence between you and the clinic.
• Technical information, such as your IP address, browser, device, operating system, approximate location, referral source and website activity.
• Cookie identifiers and analytics information.
• Any other information you voluntarily provide to us.

Please do not include sensitive medical information in a general website enquiry unless it is necessary. Where possible, medical information should be provided through the secure method specified by the clinic.

We may collect personal information:

• Directly from you when you contact us, complete a form, subscribe to communications or book an appointment.
• During consultations, treatments and other interactions with the clinic.
• Automatically when you use our website, through cookies and similar technologies.
• From service providers that help us operate our website, booking system, communications or clinic services.
• From another person acting on your behalf, where appropriate and authorised.

We may use your personal information to:

Respond to enquiries

We use your contact details and the content of your enquiry to respond to you and provide requested information.

Our lawful basis is taking steps at your request before entering into a contract and, where applicable, our legitimate interest in responding to enquiries and operating our clinic.

Arrange and manage appointments

We use your information to book, confirm, rearrange and administer appointments and to communicate with you about clinic services. Our lawful basis is taking steps before entering into a contract or performing our contract with you.

Provide consultations, treatments and aftercare

We may use relevant personal and health information to assess suitability, provide safe and appropriate services, keep treatment records and deliver aftercare.

Our lawful basis is normally performing our contract with you, complying with our legal obligations and/or our legitimate interests in delivering and documenting safe services.

Health information is special-category personal data. Where applicable, we process it because this is necessary for the provision or management of health care or treatment by, or under the responsibility of, a professional or other person owing a duty of confidentiality. In other circumstances, we may ask for your explicit consent or rely on another condition permitted by law.

Send marketing communications

If you have opted in, or where otherwise permitted by law, we may send you news, offers and information about our services.

Where consent is required, you may withdraw it at any time by using the unsubscribe link in an email or contacting contactus@aurmskin.com. Withdrawing consent does not affect processing that took place before withdrawal.

Operate and improve our website

We may use technical and analytics information to operate the website, understand how visitors use it, fix problems, improve performance and protect it from fraud or misuse.

Essential website functions are used where necessary to provide a service you request or for our legitimate interests in keeping the website secure and operational. We use non-essential analytics cookies only where you have given the required consent.

Meet legal, regulatory and professional obligations

We may use or retain information to comply with laws, respond to lawful requests, handle complaints, maintain appropriate clinical records and establish, exercise or defend legal claims. Our lawful basis is compliance with a legal obligation and/or our legitimate interests in protecting our business and legal rights. Additional conditions required by law apply when this involves health or other special-category information.

Our website uses essential cookies required for functions such as security, navigation and remembering privacy choices. These cookies cannot always be disabled through our website, although your browser may allow you to block them. Blocking essential cookies may affect how the website works.

We may also use analytics tools, such as Google Analytics, to understand website traffic and usage. Analytics cookies are non-essential and will only be placed or accessed where you have consented through our cookie banner or preference tool.

You can change or withdraw your cookie choices through the website’s cookie settings. You can also control cookies through your browser.

For more detailed information about the cookies used on the website, their providers and duration, please see our Cookie Policy or cookie preference tool.

Where necessary, we may share information with:

• Practitioners, clinicians, employees and authorised contractors working with the clinic.
• Website hosting, IT support, cybersecurity and data-storage providers.
• Appointment-booking, customer-management and communications providers.
• Email and newsletter providers.
• Website analytics providers, where you have consented to analytics cookies.
• Professional advisers, including legal, accounting, insurance and compliance advisers.
• Regulators, courts, law-enforcement bodies or public authorities where required by law.
• A buyer, investor or successor organisation in connection with a proposed or completed sale, restructuring or transfer of the clinic, subject to appropriate confidentiality protections.

Service providers may only use personal information as necessary to provide services to us and must protect it appropriately. We do not sell your personal information.

Some technology and service providers may store or access personal information outside the United Kingdom.

Where information is transferred to a country that does not provide an adequate level of protection under UK law, we use appropriate safeguards where required. These may include the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses or another lawful transfer mechanism.

You may contact us for further information about the safeguards relevant to your personal information.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, regulatory, clinical, insurance, tax, accounting and reporting requirements.

Retention periods depend on the nature of the information and our relationship with you. In particular:

• General enquiries are retained only for as long as reasonably necessary to respond and manage any resulting relationship.
• Appointment and clinical or treatment records are retained in accordance with applicable legal, regulatory, professional and insurance requirements.
• Marketing contact details are retained until you unsubscribe, withdraw consent or the information is no longer required. We may retain minimal information on a suppression list to ensure that we respect an opt-out.
• Cookie and analytics information is retained according to the duration shown in our cookie preference tool or Cookie Policy.
• Information relevant to a complaint, dispute or legal claim may be retained until the matter and any applicable limitation period have ended.

When information is no longer required, we will delete it, anonymise it or securely dispose of it.

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, access or misuse.

Access is limited to people and service providers who need the information for legitimate purposes and who are subject to appropriate confidentiality obligations.

No website, transmission method or storage system is completely secure. You should avoid sending unnecessary sensitive information through ordinary email or general website forms.

Depending on the circumstances, you may have the right to:

• Ask for access to your personal information.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your information.
• Ask us to restrict how we use your information.
• Object to certain uses of your information.
• Receive certain information in a portable format or ask us to transfer it.
• Withdraw consent at any time where processing is based on consent.
• Complain to the Information Commissioner’s Office.

Some rights are subject to legal conditions and exemptions. For example, we may need to retain certain clinical records even if you ask us to delete them.

You have the right to object at any time to the use of your personal information for direct marketing.

To exercise your rights, email contactus@aurmskin.com. We may need to verify your identity before completing a request.

Please contact us first if you have concerns about how we use your personal information so that we can try to resolve them.

You may also complain to the UK Information Commissioner’s Office: Information Commissioner’s Office Website: https://ico.org.uk/make-a-complaint/ Telephone: 0303 123 1113

Our website and services are not directed at children unless a particular service is expressly offered to them with appropriate safeguards. Where services are provided to someone under 18, we will handle their information in accordance with applicable law and obtain parental or guardian involvement where required.

Our website may contain links to websites or services operated by other organisations. We are not responsible for their privacy practices. Please read their privacy information before providing personal information to them.

We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.

We may update this Privacy Policy when our practices, services or legal obligations change. The latest version will be published on our website with the revised “Last updated” date.

Where a change materially affects how we use your personal information, we will take reasonable steps to bring it to your attention.