Last updated: May 2026
在 Beyond Medispa Limited, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us, book an appointment, or receive treatment from us.
We aim to keep this policy clear and easy to understand. We handle personal information carefully, confidentially and in line with the UK General Data Protection Regulation, the Data Protection Act 2018, and other applicable UK privacy laws. The ICO says privacy information should be clear, concise and transparent, and health data requires additional protection as special category data.
Beyond Medispa Limited is an aesthetics clinic based in the United Kingdom.
Website: beyondmedispa.com
Address: Office 3 Downs Meadow Stables, Ranmore Road, Dorking, England, RH4 1HW
Telephone: 020 4642 5480
Email: london@beyondmedispa.com
For the purposes of data protection law, Beyond Medispa Limited is the “data controller” of the personal information we collect and use.
We may collect and use the following types of personal information.
This may include:
This may include:
Because we provide aesthetic treatments, we may need to collect health-related information to make sure treatments are safe and suitable for you. This may include:
Health information is treated as special category data and is handled with extra care. The ICO confirms that health data is special category data and generally requires both a lawful basis under Article 6 UK GDPR and a separate Article 9 condition.
We may collect limited payment-related information, such as:
We do not usually store full card details ourselves. Payment information may be processed by secure third-party payment providers where applicable.
When you visit our website, we may collect information such as:
We use cookies and similar technologies to help our website work properly and to understand how people use it.
We may collect personal information when you:
We use your personal information to:
We will only use your information where we have a valid legal reason to do so.
Under UK data protection law, we must have a lawful basis for using your personal information. Depending on the situation, we may rely on one or more of the following.
We may use your information where it is necessary to provide services you have requested, such as booking an appointment or providing treatment.
We may rely on your consent for certain activities, such as:
You can withdraw your consent at any time.
We may use your information where we need to comply with legal, tax, accounting, regulatory or professional obligations.
We may use your information where it is in our legitimate interests as a clinic, provided your rights and freedoms do not override those interests. This may include:
Where we process health information, we may rely on Article 9 conditions under UK GDPR, including where processing is necessary for the provision of health or care-related services, treatment management, or where explicit consent has been given. Article 9(2)(h) covers health or social care purposes where appropriate safeguards apply.
We keep treatment records so that we can provide safe, appropriate and consistent care. These records may include consultation notes, treatment plans, consent forms, medical history, product details, aftercare advice and follow-up information.
We only collect the information we need and only authorised members of our team can access it where necessary for their role.
We may contact you with updates, offers or information about our services where we are allowed to do so by law.
You can opt out of marketing communications at any time by:
We will still send important service messages, such as appointment confirmations, appointment reminders or treatment-related information.
Our website may use cookies and similar technologies. Some cookies are necessary for the website to work properly. Others help us understand how visitors use our website or measure the performance of our advertising.
We may use:
Non-essential analytics and advertising cookies should only be used with appropriate consent. UK cookie rules are covered by PECR, and the ICO states that cookies and similar technologies require clear information and, in many cases, consent.
You can manage cookies through your browser settings and, where available, through our website cookie banner or cookie preferences tool.
We use Phorest to help manage bookings, appointments, client records and clinic communications.
When you book an appointment or interact with us through Phorest, your information may be processed through Phorest’s systems. We only use this information for clinic-related purposes, such as managing your appointments, records and communications.
We may use WhatsApp to communicate with you where appropriate, for example to respond to enquiries or help manage appointments.
Please be aware that WhatsApp is a third-party service. We recommend that you avoid sending highly sensitive medical information through WhatsApp unless necessary. Where you do share information with us by WhatsApp, we will handle it confidentially and in line with this Privacy Policy.
We do not sell your personal information.
We may share your information only where necessary and appropriate, including with:
Where we use third-party service providers, we expect them to protect your information and only use it for the agreed purpose.
Some third-party providers, such as technology, analytics or advertising providers, may process data outside the UK.
Where personal information is transferred outside the UK, we will take steps to ensure appropriate safeguards are in place, such as approved contractual protections or other lawful transfer mechanisms.
We take appropriate steps to protect your personal information from loss, misuse, unauthorised access, alteration or disclosure.
These steps may include:
While we take reasonable steps to protect your information, no method of online communication is completely secure. Please take care when sending sensitive information by email, WhatsApp or online forms.
We keep personal information only for as long as necessary for the purpose it was collected.
Clinical and treatment records may need to be kept for a longer period to meet legal, insurance, regulatory or professional requirements. Other information, such as enquiry records or marketing preferences, may be kept for a shorter period.
When information is no longer required, we will securely delete, anonymise or dispose of it.
Under UK data protection law, you have rights over your personal information. These may include the right to:
We may need to verify your identity before responding to a request.
To exercise your rights, please contact us using the details below.
If you have any questions about this Privacy Policy or how we handle your personal information, please contact:
Beyond Medispa Limited
Office 3 Downs Meadow Stables
Ranmore Road
Dorking
England
RH4 1HW
Telephone: 020 4642 5480
Email: london@beyondmedispa.com
If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve your concern.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
ICO helpline: 0303 123 1113
Website: ico.org.uk
We may update this Privacy Policy from time to time to reflect changes in our services, website, legal requirements or best practice.
The latest version will be published on our website.
