Privacy Policy

Brook Aesthetics Lisburn Last updated: 21 March 2026

Who We Are

Brook Aesthetics is a small, home-based skin and aesthetics clinic in Lisburn, Northern Ireland. We are run by David (Pharmacist Independent Prescriber) and Jennifer (Skincare Specialist).

Data Controller: Brook Aesthetics Lisburn

Address:

1 Thornbrook, Lisburn, BT27 5LW Phone: 07714 930670 Email: brook1aesthetics@gmail.com

What Personal Information We Collect

We only collect the information we need to provide safe, personalised care:

Identity & Contact Information Full name, date of birth, phone number, email address, home address, and emergency contact details.

Medical & Treatment Information (special category / sensitive data) Medical history, current medications, allergies, skin conditions, previous treatments, consultation notes, treatment records, and (with your explicit consent) before-and-after photographs.

Appointment & Payment Information Booking details, payment records, and any correspondence with us.

Website & Technical Information When you visit our Wix website, we may automatically collect limited technical data (e.g. IP address, browser type) via cookies and Wix analytics.

How We Collect Your Information We collect your data when you:

Attend an in-person consultation or treatment at our home clinic

Complete any consent or medical forms

Lawful Basis for Processing Your Data We only process your personal data when we have a valid legal reason:

Contract – to provide the treatments and services you have booked

Consent – for marketing emails, photographs, or certain optional uses (you can withdraw this at any time)

Legal obligation – to keep medical records as required by law

Legitimate interests – to run and improve our small clinic safely

For your health/medical data we rely on explicit consent or the “medical purposes” lawful basis under UK GDPR Article 9.

How We Use Your Information We use your data to:

Book and manage your appointments

Assess suitability for treatments (including Botox, fillers, skin programmes, weight-loss prescriptions, etc.)

Provide safe and effective care

Maintain accurate treatment records

Contact you about appointments or important updates

Send marketing information only if you have opted in

Comply with legal and regulatory requirements

How Long We Keep Your Information

Medical and treatment records: at least 7 years after your last appointment (standard UK clinical guidance for private aesthetics clinics).

Marketing consent records: until you unsubscribe.

Website technical data: up to 2 years.

After the retention period we securely delete or anonymise your data.

Who We Share Your Information with. We treat your data as strictly confidential. We only share it when necessary:

With our booking/payment platforms (e.g. Fresha) under strict data-processing agreements

With our professional indemnity insurer or regulatory bodies (e.g. PSNI, RQIA) if required by law

Never with third parties for marketing purposes

We do not sell your data.

International Transfers All your data is stored and processed within the United Kingdom. We do not transfer data outside the UK.

Security of Your Data As a small home-based clinic we take security seriously. All paper records are kept in locked cabinets and digital records are password-protected and encrypted. We use secure Wix hosting and up-to-date software.

Your Rights Under UK GDPR You have the right to:

Access the personal data we hold about you

Request correction of any inaccurate data

Request deletion of your data (in certain circumstances)

Withdraw consent at any time

Object to or restrict how we process your data

Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, simply contact us at the email or phone number above.

Cookies & Our Website Our Wix website uses essential cookies for functionality and optional analytics cookies. You can manage or block these through your browser settings. For full details see our separate Cookie Policy (or we can add one if you wish).

Changes to This Privacy Policy We may update this policy from time to time. The latest version will always be available on our website and in the clinic. We will notify you of any significant changes.

How to Contact Us If you have any questions about this Privacy Policy or how we handle your data, please contact: David or Jennifer Email: brook1aesthetics@gmail.com Phone: 07714 930670

Making a Complaint If you are not happy with how we have handled your data, you can complain to the UK regulator: Information Commissioner’s Office (ICO) Website: www.ico.org.uk Phone: 0303 123 1113

Thank you for trusting Brook Aesthetics with your care and your data.