Privacy PolicyHow we look after your information

1Who We Are

Zinabeauty Clinic & Academy (“Zinabeauty”, “we”, “us”) is a beauty, aesthetics and training clinic at 4 High Street, Wealdstone, Harrow HA3 7AA.

We are the data controller for the personal information we collect about clients, students, models and website visitors. This policy explains what we collect, why we collect it, how we look after it and the rights you have under UK data protection law.

If you have any questions about this policy or how we use your information, please contact us using the details at the end of this page.

2Information We Collect

Depending on how you interact with us, we may collect:

• Contact details such as your name, phone number, email address and postal address.
• Booking and payment information such as appointment history, deposits, packages purchased and payment confirmations. Card payments are handled by our payment providers; we do not store full card details.
• Health and medical information you share at consultation, such as medical history, medications, allergies, pregnancy or breastfeeding status, skin conditions, previous treatments, patch-test results and consent forms.
• Treatment records and photographs, including clinical before-and-after photographs used to plan treatment and monitor progress.
• Training information if you enrol on a course, such as prerequisites, attendance, assessments and certification records.
• Communications you send us by phone, email, WhatsApp, SMS, social media or our website forms.
• Website and device information such as IP address, browser type and pages visited, collected through cookies and similar technologies.

Health information is a “special category” of personal data, and we treat it with particular care.

3How We Use Your Information

We use your information to:

• manage enquiries, bookings, deposits, rescheduling and payments;
• assess whether a treatment is safe and suitable for you, and carry it out;
• keep accurate treatment records, consent forms and aftercare notes;
• enrol, train, assess and certify students on our courses;
• send appointment confirmations, reminders and aftercare information;
• respond to questions, feedback and complaints;
• send news and offers, only where you have agreed to receive them;
• keep our website secure and understand how it is used; and
• meet our legal, insurance, accounting and regulatory obligations.

4Our Lawful Bases

We only use your personal information where the law allows. We rely on:

• Contract: to provide the treatments, packages and courses you book with us.
• Legal obligation: to keep records we are required to keep, such as financial and tax records.
• Legitimate interests: to run, protect and improve our business, for example handling enquiries, keeping our website secure and managing complaints, where this does not override your rights.
• Consent: for marketing messages, promotional use of photographs, and non-essential cookies. You can withdraw consent at any time.

For health information, we rely on your explicit consent and, where applicable, the conditions for the provision of health care and for establishing or defending legal claims.

5Photographs

Clinical photographs help us plan your treatment and track your results, and are stored securely as part of your treatment record.

We will never use your photographs on our website, social media or other marketing without your separate permission. Declining marketing use will not affect your treatment, and you can withdraw your permission at any time for future use.

6Who We Share Your Information With

We do not sell your personal information. We only share it where necessary with:

• our booking, client management and website platform (LeadConnector / HighLevel), which hosts our forms, calendar and client records;
• payment providers that process deposits and payments;
• email, messaging and IT service providers that help us run the clinic;
• our insurers, accountants and professional advisers where needed;
• your GP or another healthcare professional, only with your consent or where necessary in an emergency; and
• regulators, law enforcement or other authorities where we are legally required to do so.

Our service providers may only use your information on our instructions and must keep it secure.

7International Transfers

Some of our service providers may store or process information outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contractual protections.

8How Long We Keep Your Information

We keep personal information only for as long as we need it for the purposes described in this policy.

Treatment records, consent forms and clinical photographs are kept for the period required by our insurers, professional guidance and the law, so that we can answer questions about your care and deal with any claims.

Financial records are kept for the period required by tax law. Marketing information is kept until you unsubscribe or withdraw consent. When information is no longer needed, it is securely deleted or anonymised.

9Keeping Your Information Secure

We use appropriate technical and organisational measures to protect your information, including secure systems, access controls and confidentiality in the clinic. Only people who need your information to provide our services can access it.

10Cookies & Our Website

Our website uses cookies and similar technologies to work properly and to understand how it is used.

Some pages include content from third parties, such as our booking and enquiry forms, client reviews, Google Maps, Google Fonts and links to Instagram and Facebook. These providers may collect information about your device and set their own cookies, in line with their own privacy policies.

Where required, we ask for your consent before setting non-essential cookies. You can also control or delete cookies through your browser settings.

11Marketing

We will only send you news, offers or promotions where you have agreed to receive them. Every marketing message includes a way to opt out, or you can contact us at any time to unsubscribe. Opting out will not affect appointment confirmations or aftercare messages.

12Your Data Protection Rights

Under UK data protection law, you have the right to:

• access a copy of the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• erase your information in certain circumstances;
• restrict or object to how we use your information in certain circumstances;
• data portability, to receive certain information in a reusable format; and
• withdraw consent at any time where we rely on consent.

Some rights are limited, for example where we must keep treatment records for legal or insurance reasons. To make a request, please contact us. We will respond within one month and may ask you to confirm your identity first. There is normally no charge.

13Complaints

If you have a concern about how we use your information, please contact us first so we can try to put things right.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

14Children

Our services and courses are intended for adults. Certain treatments are not available to clients under 18, as set out in our Terms & Conditions. We do not knowingly collect information from children without appropriate consent.

15Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

16Contact Us