Privacy policy

This policy explains how Aurum Medical Aesthetics collects, uses and protects your personal information when you visit this website, contact us or become a patient. We are committed to handling your information carefully and in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

Who we are

Aurum Medical Aesthetics is the data controller for the personal information described in this policy.

• Address: Anna Hudson Hair, 5 Farmhouse Way, Shirley, Solihull B90 4EH (medical aesthetics)
• IV wellness clinic: The Chamberlain Clinic, 81 Harborne Road, Edgbaston, Birmingham B15 3HG
• Email: info@aurummedicalaesthetics.co.uk
• Phone: 07960 931572
• ICO registration number: ZB762677

The information we collect

When you get in touch. If you send an enquiry through the form on this website, it is received by Netlify, the company that hosts our website, and passed to us by email. We receive your name, phone number, email address, area of interest and any message you choose to add. We also receive the details you give us when you phone or email us directly.

When you book online. Online bookings are made through our booking provider, Aesthetic Nurse Software. They process the details you enter on our behalf to manage your appointment. Their own privacy notice also applies when you use their booking pages.

When you become a patient. To treat you safely we collect information about your health, including your medical history, medications, allergies, consent forms, treatment notes and skin analysis images taken with OBSERV 520x imaging. Health information is a special category of personal data and we protect it accordingly.

When you visit this website. This website does not use analytics or advertising cookies. See the cookies section below for what it does use.

How we use your information

• To reply to your enquiry and arrange appointments.
• To assess whether a treatment is suitable for you, provide it safely and give aftercare.
• To keep accurate clinical records, as our professional and legal obligations require.
• To take payment and keep financial records.
• To send you appointment reminders and follow-up messages about your treatment.

We will only send you marketing messages if you have agreed to receive them, and you can opt out at any time.

Our lawful basis

We rely on the following lawful bases under the UK GDPR:

• Contract, to arrange and provide the treatment you have asked for.
• Legal obligation, to keep the records the law and our regulators require.
• Legitimate interests, to reply to enquiries and run the clinic efficiently.
• Consent, for marketing and for any optional cookies, which you can withdraw at any time.

For health information we also rely on the provision of health care under Article 9(2)(h) of the UK GDPR, together with your explicit consent where appropriate.

Who we share it with

We never sell your information. We only share it where necessary with:

• our booking provider, Aesthetic Nurse Software, our website host, Netlify, and our email and IT providers, who process it on our behalf;
• other healthcare professionals, such as your GP, where this is needed for your care and you have agreed;
• regulators, insurers or the police where the law requires us to.

How long we keep it

We keep clinical records for as long as professional guidance and the law require, which is 8 years after your last treatment. Enquiries that do not lead to an appointment are kept for 12 months after our last contact and then deleted.

How we protect it

Access to patient records is restricted to the clinical team. Records are held on secure systems, and paper records, if any, are stored securely in the clinic.

Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your information, where we are not required to keep it;
• ask us to limit how we use your information, or object to us using it;
• ask for your information in a format you can take to another provider;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email info@aurummedicalaesthetics.co.uk. We will reply within one month.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

Cookies are small files a website stores on your device. This website does not set any analytics, advertising or tracking cookies.

What we store. When you choose Accept or Decline on our cookie notice, your browser remembers that choice so we do not ask again. This is stored on your device only and is strictly necessary.

Optional cookies. If we add optional cookies in future, such as anonymous visit statistics, we will update this policy and they will only run if you have chosen Accept.

Other services. Our fonts are hosted on this website, so loading a page does not connect you to any third party. Links to our booking provider, Google Maps and Instagram take you to their sites, where their own cookie and privacy policies apply.

You can change your choice at any time: open cookie settings.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.