Lenny Aesthetic (“we”, “us”, “our”) is the data controller for the personal information you share with us. We are committed to protecting your privacy and handling your data in line with the UK GDPR and the Data Protection Act 2018.
Who we are
Lenny Aesthetic, 83 Newport Road, New Bradwell, Milton Keynes, MK13 0AJ. For any privacy queries, please contact us through the inquiry form or WhatsApp link on our website.
What information we collect
- Identity and contact details (name, phone number, email if provided).
- Health and medical information shared during consultation or on consent forms, including medical history, allergies, medication and treatment goals.
- Photographs of treatment areas, where you have consented, for clinical records.
- Appointment, payment and treatment history.
- Messages you send us via WhatsApp, social media or our inquiry form.
How we use your information
- To assess suitability for treatment and provide safe clinical care.
- To maintain accurate medical and treatment records.
- To contact you about appointments, aftercare and follow-up.
- To send special offers or news, only where you have opted in.
- To meet our legal, regulatory and insurance obligations.
Lawful basis
We rely on your explicit consent for processing health data, on contract to deliver treatments you book, on legal obligationfor record keeping, and on legitimate interests for general clinic administration.
Sharing your information
We do not sell your data. We may share limited information with our insurance provider, regulators (such as the NMC), or trusted service providers who help us run the clinic (booking platform, consent form provider, secure record storage). When you message us via WhatsApp or social media, those platforms process your messages under their own privacy policies.
AI-assisted enquiry replies
The clinic owner may use Lovable AI to draft an acknowledgement alongside verified treatment prices. Only treatment names from our clinic menu are sent to the AI service. Your name, contact details, original message and medical information are not sent. Replies are stored privately, reviewed by the clinic owner and never sent automatically. AI drafts do not assess medical suitability or replace a nurse consultation.
How long we keep it
Clinical and treatment records are kept for a minimum of 8 years from your last treatment, in line with professional guidance. Marketing contact details are kept only while you remain opted in.
Your rights
You have the right to access, correct, delete or restrict use of your personal data, to withdraw consent at any time, and to complain to the Information Commissioner’s Office (ico.org.uk). To exercise any of these rights, contact us through the website.
Security
We store records securely, limit access to authorised personnel, and use reputable third-party platforms with their own security controls.