Open for enquiries Monday to Sunday · Appointments Thursday & Saturday, plus some Wednesdays & FridaysCall 0203 872 2403 · Free first consultation

Policies

Privacy Policy

How we look after your personal and health information.

Last updated 30 October 2026

Key Points

  • We collect only what we need to look after you safely, take bookings and answer your questions.
  • Your medical information is confidential and is seen only by Dr Hana and those who help us provide your care.
  • We never sell your information.
  • Clinical records are kept for at least 8 years after your last treatment, as medical guidance requires.
  • You can ask to see your information, correct it, or complain at any time.

Who We Are

Dr Hana Aesthetics, Suite 1, 57 Salusbury Road, Queen's Park, London NW6 6NJ, is responsible for your personal information (the "controller"). Contact: info@drhana.co.uk or 0203 872 2403. Information Commission (ICO) registration number: [To confirm: ICO registration number]. Business details: [To confirm: trading name / company details].

What We Collect

  • Contact details such as your name, email address and phone number, when you enquire, book or buy a voucher.
  • Booking details through our booking system (Setmore), including your appointment and deposit.
  • Payment details are handled by our payment providers. We do not see or keep your full card number.
  • Health information at your consultation and treatment: your medical history, medicines, allergies, clinical notes, consent forms and clinical photographs.
  • Website information such as cookies, only as described in our Cookie Policy.
  • Newsletter sign-ups, only if you choose to join.

Please do not send medical information through our website forms or social media messages.

Why We Use It

PurposeLegal basis
Providing safe care, including consultations, treatment, records and follow upTo provide our service to you, and for health care purposes by a health professional (UK GDPR Articles 6(1)(b) and 9(2)(h))
Bookings, deposits and gift vouchersTo provide our service to you
Keeping clinical, financial and tax recordsLegal obligation
Product safety, recalls and reporting side effectsLegal obligation and public health
Using photographs or reviews in marketingOnly with your explicit, written consent, which you can withdraw at any time
NewsletterYour consent. You can unsubscribe at any time
Website analyticsYour consent, given through our cookie banner
Keeping our systems secureLegitimate interests

Who We Share It With

We share information only when we need to, and only what is needed:

  • Companies that help us run the clinic, such as our booking system (Setmore), website host (Wix), payment providers and email provider. They act on our instructions. [To confirm: confirm full list of providers, including any clinical records system]
  • Your GP or another clinician, with your consent.
  • Product manufacturers and the Medicines and Healthcare products Regulatory Agency (MHRA) when reporting a side effect, anonymised where possible.
  • Our insurer or medical defence organisation if there is a claim, and the police or courts if the law requires it.

Some providers may store information outside the UK. When they do, we make sure it is protected by approved safeguards, such as the UK–US Data Bridge or approved contract terms.

How Long We Keep It

InformationHow long
Clinical records and photographsAt least 8 years after your last treatment [To confirm: confirm with medical defence organisation]
Bookings and payments6 years
Gift vouchersUntil the voucher expires, then 6 years
Enquiries that do not lead to a booking12 months
NewsletterUntil you unsubscribe
Analytics (if you accept)Up to 14 months

Your Rights

You have the right to:

  • ask for a copy of your information (free of charge; we reply within one month, and may ask for proof of identity)
  • ask us to correct information that is wrong
  • ask us to delete or restrict your information. We may need to keep clinical records for the time shown above
  • object to how we use your information, or ask to move it to another provider
  • withdraw consent at any time, where we rely on consent.

We do not make decisions about you by automated means.

Complaints About Your Data

Please tell us first, by email at info@drhana.co.uk, by phone on 0203 872 2403, by post to Suite 1, 57 Salusbury Road, Queen's Park, London NW6 6NJ, or in person. We will acknowledge your complaint within 30 days (we aim for 3 working days), keep you updated and tell you the outcome. You can also complain to the Information Commission (ICO) at ico.org.uk or on 0303 123 1113.

Keeping It Safe

We protect your information with access controls, secure systems and encryption, and only people who need it can see it. Our services are for adults aged 18 and over. We may update this policy, and the date at the top shows when it last changed.

This page is written in plain English. If anything is unclear, please call 0203 872 2403 or email info@drhana.co.uk.