logo

Privacy Policy

Aesthetidocs Limited ("Aesthetidocs") is committed to protecting your personal information and respecting applicable data protection laws around the world. This privacy policy explains how we do this, and it applies to your use of our websites, products, and services.

How we use your personal information

We use personal information in order to promote and provide the Aesthetidocs software service, to ensure the security of our websites, and to run our business. We have set out below more information on the categories of personal information that we collect, the specific ways in which that personal information is processed by us, the legal bases which permit us to do this, and the types of partners with whom we share your personal information.

What information does Aesthetidocs collect?

  • Your name, username, and password
  • Your address, email address, and phone number
  • Your payment details
  • Your marketing preferences, including any consents you have given us
  • Information related to the browser or device you use to access our websites
  • Records of your use of Aesthetidocs services
  • Any personal medical information you submit to us when completing any of our forms, documentation or otherwise provided by you as part of booking and managing your appointment with your chosen clinic

How does Aesthetidocs use your information?

We use your information as follows:

  • To fulfil a contract with you or take steps at your request before this:
    • When you use our platform to create and manage a booking with a clinic
    • Providing information and technical support if you ask for this
    • Contacting you with information about changes to services
    • Handling credit card information provided through our websites using PCI-compliant payment services
    • Storing and analysing your information in order to review and progress your job application if you apply to work with us
  • As required by Aesthetidocs to conduct our business and pursue our legitimate interests, in particular:
    • Giving you access to our products or services
    • Providing you with different content within a product or service, depending on how you use that product or service
    • Letting you know about Aesthetidocs products and services by post, email, and phone in accordance with your marketing preferences and laws relating to direct marketing
    • Analysing how you use Aesthetidocs products and services so we can improve our levels of service and develop future products and services, including through the use of surveys
    • Ensuring the security of Aesthetidocs websites and information technology systems and protecting our rights.
  • Where you give us consent:
    • Where we need your consent to process your medical and other sensitive personal information
    • If we need your consent in order to send marketing for Aesthetidocs products and services to you
  • For purposes which are required by law:
    • Sharing your personal information in order to comply with legal obligations to which Aesthetidocs is subject.

How will Aesthetidocs share your information?

We share your personal details:

  • Within Aesthetidocs in order to carry out the processing described above
  • With such clinics or treatment providers with whom you are seeking to make and manage a booking or appointment
  • With third party service providers who process your information on Aesthetidocs’s behalf for the purposes above – such as payment processors, or IT service providers

We will also share your personal information:

  • If we think this is necessary to in order to protect the rights, property, or safety of Aesthetidocs, our employees, our commercial partners, or our customers. This includes sharing information for the purposes of fraud protection and credit risk reduction
  • With government authorities and/or law enforcement officials if required by law.

Giving and withdrawing your consent, and updating your personal information

Where your consent is required for us to process your personal information, we will ask for your consent at the point at which you provide your data. You have the right to withdraw that consent at any time. You can also update your personal information at any time. If you wish to do either, contact us at support@aesthetidocs.com .

Storing your personal information

Your personal information may be stored and processed outside of the country where it is collected, including outside of the United Kingdom or the European Economic Area. When transferring information to others, within the UK, the EEA or otherwise, we ensure that appropriate and suitable safeguards and technical measures are in place to protect your personal data. To do this, we make use of standard contractual clauses that have been approved by the UK authorities and the European Commission with our suppliers, or we implement other similar measures required by laws around the world.

We will only keep records of your personal information for as long as is reasonably necessary for the purposes for which we have collected it, and in order to comply with any statutory or regulatory obligations in relation to retention of records. We respect requests to stop processing your personal data for marketing purposes. This includes keeping a record of your request indefinitely so that we can respect your request in future.

Your rights

You have the right to request access to and rectification or erasure of personal information, the right to restrict processing of your personal information, and the right to object to processing of your personal information. You have the right to object to your personal information being processed on the grounds of Aesthetidocs’s legitimate interests. You have the right to object to us sending you direct marketing and profiling you for the purposes of direct marketing. You have the right to lodge a complaint regarding our processing of your personal information with a data protection supervisory authority in a country where you live, work, or where you believe a breach may have occurred.

Contacting us

The data controller for our websites, products and services is Aesthetidocs Ltd of Lockview House, 49 Lockview Road, Belfast, Northern Ireland, BT9 5FJ.

You can contact us by email at support@aesthetidocs.com .

If you wish to contact our Data Protection Officer, please email dataprotection@aesthetidocs.com .

Last Updated: October 2026

1. Introduction

At Dr Noor Aesthetics, we are committed to protecting your privacy and handling your personal information with care, confidentiality and transparency.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, book an appointment, receive treatment, purchase products or communicate with us.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK legislation.

Dr Noor Aesthetics

103–105 Churchfield Road, Acton, London, W3 6AH

Website: https://drnooraesthetics.co.uk/

For the purposes of applicable data protection legislation, Dr Noor Aesthetics is the data controller for the personal information described in this policy, subject to confirmation of our registered legal entity.

2. Information We Collect

We collect information necessary to provide safe, effective and personalised medical and aesthetic services.

This may include:

Personal and Contact Information

  • Full name, date of birth and contact details
  • Address and billing information
  • Appointment and transaction history
  • Communication preferences

Medical and Health Information

  • Medical history, medications, allergies and relevant diagnoses
  • Consultation notes, clinical assessments and treatment plans
  • Clinical photographs, skin analysis images and treatment progress records
  • Laboratory results, prescriptions and relevant correspondence
  • Treatment consent forms and clinical outcomes

Payment Information

We collect information relating to payments, invoices and transactions. Card payments are processed through authorised payment providers, and we do not routinely store complete payment card details.

Website and Technical Information

When you visit our website, we may collect technical information such as your IP address, browser type, device information and website usage data.

Marketing Preferences

We may record your preferences regarding newsletters, promotions and other communications.

3. How We Use Your Information

We use your personal information to:

  • Arrange, confirm and manage appointments
  • Assess your suitability for treatments and provide medical care
  • Maintain accurate and confidential clinical records
  • Process payments, purchases and refunds
  • Communicate important information about your appointments, treatment and aftercare
  • Respond to enquiries, complaints and feedback
  • Meet professional, regulatory and legal obligations
  • Improve our services and patient experience
  • Send marketing communications where permitted by law
  • Manage legitimate business operations, including a potential business sale or restructuring, subject to appropriate safeguards
4. Our Legal Basis for Processing Your Data

Under UK GDPR, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on:

  • Contractual necessity: To provide services you have requested or booked.
  • Legal obligations: To comply with applicable healthcare, financial and regulatory requirements.
  • Legitimate interests: To operate and improve our business, maintain security and manage appropriate business communications, where these interests do not override your rights.
  • Consent: Where specifically required, including certain marketing activities and optional uses of clinical photographs.

Medical information is classified as special category data under UK GDPR. Where applicable, we process this information for medical diagnosis, treatment and the provision of healthcare by professionals subject to duties of confidentiality, or under another appropriate legal condition.

Consent to undergo treatment is separate from consent to use personal information for marketing purposes.


5. Clinical Photography and Media Consent

Clinical photographs and videos may be taken as part of your consultation, assessment, treatment planning or progress monitoring.

These images form part of your confidential clinical record where relevant.

We will not use identifiable patient photographs, videos or testimonials for promotional purposes without obtaining separate, appropriate consent.

Promotional use may include our website, social media platforms, advertising and educational materials.

You may withdraw your consent for future promotional use at any time. We will take reasonable steps to remove material from platforms under our control, although we cannot guarantee removal of content already shared, downloaded or distributed by third parties.

Declining promotional consent will not affect your treatment or care.

6. Sharing Your Information

We do not sell your personal information.

We may share relevant information with trusted third parties where necessary, including:

  • Healthcare professionals and laboratories: Where required for your assessment, treatment or continuity of care.
  • Booking and practice management providers: To manage appointments, communications and clinical records.
  • Payment processors: To securely process transactions.
  • Email and communication providers: To send appointment reminders, relevant service information and permitted marketing communications.
  • Professional advisers and insurers: Where necessary for legal, regulatory or professional purposes.
  • Regulatory and legal authorities: Where disclosure is required or permitted by law.

Third-party service providers are required to handle personal information securely and in accordance with applicable data protection requirements.

We only share information that is necessary and appropriate for the relevant purpose.

7. Marketing Communications

We may contact you with information about our services, skincare products, educational content, clinic updates and promotional offers where we have an appropriate lawful basis and comply with applicable electronic marketing rules.

You can unsubscribe from marketing emails at any time using the unsubscribe link provided or by contacting us directly.

Opting out of marketing will not prevent us from sending essential appointment, treatment or administrative communications.

8. Cookies and Website Analytics

Our website may use cookies and similar technologies to support functionality, improve user experience and understand website performance.

Where required by law, we will request your consent before placing non-essential cookies, including relevant analytics or advertising cookies.

You can manage your preferences through our website's cookie controls, where available, or through your browser settings.

9. Data Storage, Retention and Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse or disclosure.

These measures may include secure practice management systems, restricted staff access, password protection and appropriate confidentiality procedures.

Clinical records are retained in accordance with applicable healthcare record retention requirements and professional guidance. Other personal information is retained only for as long as necessary for the purpose for which it was collected or to meet legal, regulatory or legitimate business requirements.

Where third-party service providers process information outside the UK, we ensure appropriate international data transfer safeguards are in place where required.

10. Your Data Protection Rights

Under UK data protection legislation, you may have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request erasure of your information in certain circumstances
  • Request restriction of processing
  • Object to certain uses of your information
  • Request transfer of your information where applicable
  • Withdraw consent where processing relies on consent

Please note that certain rights, including deletion, may be restricted where we are legally or professionally required to retain medical records.

We will normally respond to valid data protection requests within one calendar month, subject to applicable extensions.

If you are dissatisfied with how we handle your personal information, you may raise a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk.

11. Children's Privacy

Our services are primarily intended for adults aged 18 and over.

Where we provide services to individuals under 18, we will assess consent, parental responsibility and confidentiality requirements in accordance with applicable law and professional guidance.

We take additional care when processing children's personal and medical information.

12. Third-Party Websites

Our website may contain links to third-party websites, booking platforms or social media services.

We are not responsible for the privacy practices of external websites and encourage you to review their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our services, legal requirements or data protection practices.

The most recent version will be published on our website, together with the date of the latest update.

14. Contact Us 

If you have any questions about this Privacy Policy, how your information is handled or wish to exercise your data protection rights, please contact:

Dr Noor Aesthetics

103–105 Churchfield Road

Acton, London, W3 6AH

Website: https://drnooraesthetics.co.uk/

Email: Info@drnooraesthetics.co.uk

We are committed to addressing privacy concerns promptly, fairly and transparently.