Pin Aesthetics – Privacy Policy
Last updated: 28/12/2025
Pin Aesthetics (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our clinic, use our services, or interact with us online.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Registered with ICO
1. Who We Are
Pin Aesthetics
Westhoughton, Bolton, UK
Email: info@pinaesthetics.uk
Phone: 07956455629
Data Controller: Sophie Dyson Aesthetics Nurse Prescriber
—
2. What Personal Data We Collect
We collect the following categories of information:
A. Identity & Contact Information
• Name
• Address
• Date of birth
• Email address
• Phone number
• Emergency contact (if required)
B. Medical & Treatment Information
• Medical history
• Medication list
• Allergies
• Treatment records
• Consultation notes
• Before/after photographs
• MEICET skin analysis reports
• Consent forms
• Prescriptions and clinical decisions
C. Financial Information
• Payment details (processed securely via third‑party providers; we do not store card details)
D. Technical & Website Data
• IP address
• Browser type
• Cookies (for website functionality and analytics)
E. Marketing Preferences
• Email marketing opt‑in status
• Social media interactions
—
3. How We Use Your Data
We process your data for the following purposes:
A. To Provide Safe Clinical Treatment
• Assessing suitability for treatments
• Creating personalised treatment plans
• Prescribing medication
• Maintaining accurate medical records
• Monitoring treatment outcomes
B. To Manage Appointments & Communication
• Booking and confirming appointments
• Sending reminders
• Responding to enquiries
• Providing aftercare advice
C. Legal & Regulatory Compliance
• Meeting NMC, MHRA, and UK GDPR requirements
• Preparing for CQC registration
• Maintaining accurate clinical documentation
• Incident reporting (if required)
D. Marketing (Only With Your Consent)
• Email newsletters
• Promotions
• Clinic updates
• Social media content (only with explicit written consent for images)
—
4. Lawful Basis for Processing
We rely on the following lawful bases:
Purpose Lawful Basis
Medical treatment Legitimate interests & Provision of healthcare
Medical records Legal obligation
Consent forms, photos Explicit consent
Marketing Consent
Payment processing Contract
—
5. How We Store & Protect Your Data
We use secure, encrypted systems to store your data, including:
• Encrypted clinical record systems
• Password‑protected devices
• Secure cloud storage
• Restricted staff access
• Regular data audits
We retain medical records for 8 years, or longer for certain treatments as required by law.
—
6. Sharing Your Data
We only share your data when necessary and with trusted third parties, such as:
• Pharmacy providers (for prescriptions)
• Booking and payment platforms
• Insurance providers (if required)
• Regulatory bodies (only when legally required)
We never sell your data.
—
7. International Transfers
If any third‑party service stores data outside the UK, we ensure they meet UK GDPR adequacy standards and use appropriate safeguards.
—
8. Your Rights
You have the right to:
• Access your data
• Correct inaccurate information
• Request deletion (where legally appropriate)
• Withdraw consent
• Restrict processing
• Object to marketing
• Request data portability
To exercise your rights, contact: info@pinaesthetics.uk
—
9. Cookies
Our website uses cookies for:
• Basic functionality
• Analytics
• Improving user experience
You can manage cookies through your browser settings.
—
10. Photography & Social Media
We will never use your images for marketing without your explicit written consent.
Declining consent will never affect your treatment.
—
11. Children
We do not provide aesthetic treatments to individuals under 18.
Proof of age may be required.
—
12. Contact Us
If you have questions about this Privacy Policy or how your data is handled:
Pin Aesthetics
Westhoughton, Bolton
Email: info@pinaesthetics.uk
Phone: 07956455629
ICO registration number. ZB811336