Privacy Policy

Last updated 28 September 2026

Soft Touches Aesthetics Ltd is committed to respecting your privacy and the privacy of every patient, visitor and staff member. This policy explains what information we collect, why we collect it and how we keep it safe.

How we use your information

The information we collect is used to provide your care and treatment safely, to manage your appointments and payments, to meet our legal and regulatory duties as a CQC registered clinic and to improve the way we look after you.

We only use your information lawfully, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The information we collect

The information you provide to us may include:

You are under no statutory or contractual obligation to provide your personal information. However, we do need the information above so that we can offer you care and treatment safely.

Our legal basis for using your data

We rely on the following lawful bases, depending on the information and how it is used:

• Contract: to book, provide and take payment for your treatments.
• Legal obligation: to keep clinical records and meet our regulatory duties.
• Health and care: your medical history, consent forms, treatment notes and clinical photographs are health information. We use them to provide your care, which is permitted under Article 9(2)(h) of the UK GDPR.
• Consent: for our newsletter and for using any photographs in marketing. We will always ask first. You can withdraw consent at any time.
• Legitimate interests: to run and improve our clinic and website in ways you would reasonably expect.

Who we share your data with

We never sell your data. We only share it with trusted organisations that help us provide our services, such as our online booking system, payment providers, email and newsletter services, our website host and Google Analytics. These organisations may only use your data on our instructions. We may also share information where the law requires it or where it is needed to protect your health.

Your data is held within the United Kingdom wherever possible. Where a service provider processes data outside the UK, we make sure appropriate safeguards are in place, such as a UK adequacy decision or approved contract terms.

How long we keep your data

Unless the law requires otherwise, we keep your records for 8 years after your last treatment. After this they are securely deleted.

Your rights

You have the right to:

• Ask for a copy of the information we hold about you
• Ask us to correct anything that is inaccurate or incomplete
• Ask us to delete your information, where we are not required by law to keep it
• Ask us to restrict or stop using your information
• Object to how we use your information
• Ask for your information to be transferred to another provider
• Withdraw your consent at any time, for example by using the unsubscribe link in our emails

To use any of these rights, please email info@soft-touches.uk. There is no charge. We will respond within one month.

Protecting your information

We take administrative, technical and physical precautions to protect your data against loss, theft, misuse and unauthorised access, disclosure, alteration or destruction. These include secure systems, restricted access, firewalls and SSL encryption on this website.

Cookies

Cookies are small text files placed on your device to help websites work well and to provide information to the site owner. We use cookies to remember your preferences and to understand how visitors use our website. When you first visit, our cookie banner lets you accept or turn off non-essential cookies. You can change your choice at any time using the settings link in the banner.

Some pages include content from other websites, such as Instagram, TikTok and Google reviews. These services may set their own cookies. You can also control or delete cookies in your browser settings. The About Cookies website has guidance for all modern browsers.

Google Analytics

We use Google Analytics to understand how visitors use our website so that we can improve it. Google Analytics uses cookies to collect information such as the pages you visit, how long you stay and the type of device you use. It does not tell us who you are. Google may process this information outside the UK under appropriate safeguards. You can find out more in how Google uses information from sites that use its services. You can opt out using the Google Analytics opt-out browser add-on.

Concerns and complaints

If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO).