What We
Collect
To provide our services safely and effectively, we collect the following categories of personal data. We collect only what is necessary for the purposes described in this policy.
Identity & Contact Details
Name, date of birth, email address, telephone number and postal address — used to identify you, communicate with you and manage your care.
Booking & Payment Information
Appointment details, consultation history and payment records. Payment transactions are processed securely via our booking platform; we do not store full card details.
Consultation Information
Health history, skin concerns, medications and any other clinically relevant information you share during an in-person or online consultation — necessary to provide safe, appropriate care.
Photos Submitted for Assessment
Photographs submitted as part of an online skin clinic assessment. These constitute special category health data and are handled with the highest level of care and confidentiality.
Why We
Collect It
We use your personal data only for legitimate purposes directly related to providing and improving our services. We do not use your data for marketing without your explicit consent.
Providing Consultations & Treatments
To deliver the clinical services you have requested, assess your suitability for treatment, and create personalised plans and aftercare guidance.
Coordinating Prescriptions
To coordinate prescription or compounded skincare products on your behalf where clinically appropriate and where you have chosen delivery via our pharmacy partner.
Managing Bookings
To process appointments, send reminders and manage your relationship with the clinic — including follow-up and ongoing care.
Legal & Regulatory Compliance
To comply with our obligations as a CQC-registered clinic — including clinical record-keeping requirements and any other legal obligations applicable to our practice.
Data
Sharing
We share your personal data only where necessary to deliver the services you have requested or where we are legally required to do so. We do not sell, rent or trade your personal data to third parties.
Booking & Payment Providers
Our booking platform and payment processor receive the data necessary to manage appointments and process payments securely. These providers are contractually bound to protect your data.
Pharmacy & Compounding Partners
Where you have chosen delivery of prescription or compounded skincare, the relevant details are shared with our pharmacy or compounding partner solely to fulfil that order.
We do not sell your data. We do not share it for advertising or marketing purposes. Your clinical information is treated with the same discretion you would expect from any registered healthcare provider.
International
Transfers
In certain circumstances, the delivery of our services may require your data to be transferred to, or processed in, a country outside the United Kingdom or European Economic Area.
Where such transfers are necessary, we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses or transfers to countries with an adequacy decision — to protect your data to the same standard required under UK data protection law.
Any international transfer of your data occurs only where necessary to deliver the service you have requested, and only with appropriate protections in place.
Retention
& Your Rights
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected — including the clinical record-keeping requirements of a CQC-registered clinic and any applicable legal obligations.
Under UK data protection law, you have the following rights in relation to the personal data we hold about you:
To exercise any of these rights, or to make a data-related enquiry, please contact us at info@shujoaesthetics.co.uk. We will respond within the timeframes required by law.
Contact
Us
If you have any questions about this privacy policy, how we handle your data, or wish to exercise any of your rights, please get in touch:
info@shujoaesthetics.co.uk — for data enquiries, access requests and corrections.
Telephone
01908 299324 — during normal clinic hours.
If you remain dissatisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.