Privacy policy

Fill Good Aesthetics Ltd (company number 15080264) runs Fill Good Aesthetics, a nurse-led aesthetic clinic at Glebe Farm, Church End, Donington, Spalding, Lincolnshire PE11 4SQ. We are the controller of the personal information described here, which means we decide how it is used and we are responsible for looking after it.

If you have a question about your information, email alicia@fillgoodaesthetics.uk or call 07441 371504.

When you ask us to call you back, book an appointment or message us: your name, phone number, email address, and anything you choose to tell us.

When you come for a consultation or treatment: your medical history, medication, allergies and previous treatments, what you would like to change, the treatment we carry out and the products we use, your consent forms, and clinical photographs. This is health information, which the law treats as special category data and protects more strictly.

When you visit this website: our hosting provider, Cloudflare, processes technical information such as your IP address and browser in order to deliver the site and protect it from abuse. We do not use analytics or advertising tracking. The cookies page has the detail.

We use your information to arrange and provide your consultation and treatment, because you have asked us to. The law calls this performing a contract with you, or taking steps towards one.

We keep clinical records because registered health professionals must keep accurate records. Providing healthcare under the responsibility of a registered health professional is the lawful basis for using your health information, under Article 9(2)(h) of the UK GDPR and the Data Protection Act 2018.

We use your contact details to answer enquiries, follow up after treatment and deal with complaints, because we have a legitimate interest in running the clinic safely and well.

If you tick the box to receive messages from us, we send them on the basis of your consent, and you can withdraw it at any time by telling us.

Clinical photographs are part of your record. We use them to plan your treatment and to check how it has worked.

We will never publish a photograph of you, on this website, on social media or anywhere else, without your separate, written consent for that specific use. You can withdraw that consent at any time, and we will remove the photograph from our website and social media.

We use a small number of service providers to run the clinic, and they handle your information only on our instructions:

• LeadConnector (GoHighLevel), which runs our enquiry form, bookings and appointment messages
• Google Workspace, for email
• Cloudflare, which hosts this website
• and our card payment provider.

Beyond that, we share information only when there is a reason to:

• with your GP or another clinician when it is needed for your care, with your agreement or in an emergency
• with our insurers or professional advisers if there is a claim or a complaint
• and with a regulator, the police or a court when the law requires it. We never sell your information.

Some of these providers may process information outside the UK, including in the United States. Where they do, we rely on the protections UK law requires, such as the UK–US data bridge or the Information Commissioner's international data transfer agreement.

We keep clinical records for eight years after your last treatment, the period the NHS records code sets for adult health records. Enquiries that never lead to an appointment are deleted within twelve months.

You have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that is wrong
• ask us to delete it, although we may have to keep clinical records for the period above
• ask us to restrict or stop using it
• and withdraw any consent you have given.

To use any of these rights, email or call us. We will reply within one month, and there is no charge.

If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113.

We update this policy when the way we handle information changes. The date at the top says when it last changed.