Privacy Policy

TLC — The Luxury Clinic · Last updated: May 2026

This policy explains how TLC — The Luxury Clinic ("TLC", "we", "us") collects, uses, and protects your personal information when you visit our website or use our services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

TLC — The Luxury Clinic, The Loft, Forstal Road, Maidstone, Kent ME14 3AS. For any privacy queries, contact: tlc.theluxuryclinic@gmail.com · 07718 211 503.

We are the data controller for the personal data we collect about you.

2. What we collect

When you submit our enquiry form or contact us, we collect:

• Your name
• Email address
• Phone number
• Treatment interests and any skin concerns or health information you choose to share

If you book a treatment, we may collect additional information needed for safe treatment, including relevant medical history, allergies, and consent records.

3. How we use your information

We use your personal data to:

• Respond to your enquiry and arrange consultations or appointments
• Provide treatments safely and effectively
• Send appointment confirmations, reminders, and aftercare information
• Maintain treatment records as required by our insurance and professional standards
• Comply with our legal and regulatory obligations

4. Legal basis for processing

We process your data under the following lawful bases:

• Consent — when you submit the enquiry form or opt in to communications
• Contract — to provide the treatments you book with us
• Legitimate interests — to run our business and respond to enquiries
• Legal obligation — to keep treatment records as required by law and insurance

Health-related information shared in your enquiry is treated as special category data and processed only with your explicit consent or where necessary for the provision of healthcare services.

5. Who we share data with

We do not sell your data. We may share it with:

• Our form submission provider (Formspree) — solely to deliver your enquiry to us
• Our insurer or professional body — only if required to handle a claim or complaint
• Legal or regulatory authorities — where we are legally obliged to do so

6. How long we keep it

Enquiry data is kept for up to 24 months from your last contact. Treatment records are kept for at least 8 years from your last appointment, in line with industry guidance and insurance requirements.

7. Your rights

Under UK GDPR you have the right to:

• Request a copy of the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (where there is no overriding legal obligation to keep it)
• Object to or restrict our processing of your data
• Withdraw your consent at any time
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email tlc.theluxuryclinic@gmail.com.

8. Cookies and tracking

This website does not set tracking or advertising cookies. We load fonts from Google Fonts (fonts.googleapis.com), which means your IP address is briefly shared with Google to deliver the fonts. No identifiable browsing information is collected on this site.

9. Security

We take reasonable steps to keep your information secure. Enquiry data is transmitted over an encrypted (HTTPS) connection. Paper records are kept locked at the clinic. Digital records are kept on password-protected devices.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of the page will reflect any changes.