Privacy Policy

ZOLU Medical Aesthetics – Sole Trader Clinic
ZOLU Medical Aesthetics is committed to protecting your privacy and handling your personal data responsibly and transparently. This Privacy Policy outlines how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are
ZOLU Medical Aesthetics is a sole trader aesthetics clinic based in Wiltshire, United Kingdom. All treatments are carried out by a qualified and insured nurse prescriber. For the purposes of data protection law, we are the “data controller” of your personal information.

2. What Information We Collect
We may collect and process the following types of personal data:
•     Identity data: Full name, date of birth
•     Contact data: Email address, phone number, postal address
•     Medical data: Health history, medications, allergies, treatment records
•     Payment data: Transaction details (no card details are stored)
•     Marketing preferences: Consent to receive updates or promotions

3. How We Use Your Information
Your personal data is used for the following purposes:
•     To provide safe and appropriate aesthetic treatments
•     To manage appointments and communicate with you

•     To maintain accurate medical records
•     To process payments and deposits
•     To comply with legal and regulatory obligations
•     To send occasional updates or promotions (only with your consent)

4. Legal Basis for Processing
We process your personal data under the following lawful bases:
•     Consent – for marketing communications
•     Contract – to deliver services you have requested
•     Legal obligation – to comply with healthcare regulations
•     Vital interests – to protect your health and safety during treatment

5. Data Sharing

We do not sell or share your personal data with third parties for marketing purposes. Your information may be shared only with:
•     Regulatory bodies (if legally required)
•     Professional indemnity insurers (in case of a claim)
•     Secure payment processors (for deposit and treatment payments)

6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined above, including legal and regulatory requirements. Medical records are typically retained for a minimum of 8 years in accordance with UK healthcare guidelines.

7. Your Rights
Under UK GDPR, you have the right to:
•     Access the personal data we hold about you

•     Request correction of inaccurate data
•     Request deletion of your data (subject to legal limitations)
•     Withdraw consent for marketing communications
•     Lodge a complaint with the Information Commissioner’s Office (ICO)

8. Data Security
We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. All records are stored securely and accessed only by authorised personnel.

9. Cookies and Website Analytics
Our website may use cookies to enhance user experience and collect anonymous usage data. You can manage cookie preferences through your browser settings.

10. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or clinic practices. The latest version will always be available on our website.

11. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact:
ZOLU Medical Aesthetics
Email: Info@zoluaesthetics.com
Phone: 07523188974
Address: The Old Police House , Shrewton , Wilts, SP34HD