Privacy Policy

01Who we are

Solunexa Medispa (“we”, “us”, “our”) is the data controller responsible for your personal information. We are a medical-led aesthetics clinic based in Sale, Cheshire.

Address: Unit 7, 60A Washway Road, Sale, M33 7RE
Phone: 0161 843 8697
Email: info@solunexamedispas.com
Website: solunexamedispas.com

We are registered with the Information Commissioner’s Office (ICO) under registration number [your ICO reference]. If you have any questions about this policy or your data, please contact us using the details above.

02Information we collect

Information you give us — when you enquire, register, book, or attend an appointment: your name, date of birth, contact details (email, phone, address), your responses to our medical and consultation questionnaires, details of treatments and your treatment plan, clinical photographs (only ever with your separate consent), payment and deposit details, and your marketing and contact preferences.

Information we collect automatically — when you use our website: your device and browser type, IP address, pages visited, and how you interact with the site, collected through cookies and similar technologies (see section 6).

Information from third parties — when you contact us through a Facebook or Instagram lead form, our online booking system, or when you leave a review, we receive the details you provided there (such as your name, email and phone number).

03How we use your information & our legal bases

We use your personal information to:

3.1. Provide consultations, treatments and aftercare — on the basis of our contract with you and, for health information, your explicit consent and the provision of healthcare.

3.2. Manage your bookings, appointments, deposits and payments — on the basis of our contract with you.

3.3. Keep accurate clinical and treatment records — to meet our legal and regulatory obligations and for the provision of healthcare.

3.4. Contact you about your enquiry, appointments, reminders, reviews and aftercare — on the basis of our legitimate interests in running the clinic and caring for our patients.

3.5. Send you marketing and offers — only with your consent (see section 5).

3.6. Operate, secure and improve our website and measure the performance of our advertising — on the basis of our legitimate interests and, for non-essential cookies, your consent.

3.7. Handle complaints, exercise or defend legal claims, and comply with the law — on the basis of our legal obligations and legitimate interests.

04Health & special-category data

05Marketing

5.1. We will only send you marketing messages by email, SMS or phone where you have given us your consent to do so.

5.2. You can opt out at any time — by using the unsubscribe link in any email, replying STOP to a text, or contacting us directly. Opting out of marketing will not affect messages we need to send you about your bookings or treatments.

06Cookies & analytics

6.1. Our website uses cookies and similar technologies to make the site work, understand how it is used, and measure our advertising. This includes privacy-focused website analytics and the Meta (Facebook) Pixel, which helps us understand which adverts lead to enquiries and bookings.

6.2. You can control or delete cookies through your browser settings, and manage non-essential cookies through any cookie banner shown on our site. Blocking some cookies may affect how the website works.

07Who we share your information with

We never sell your personal information. We share it only where necessary, with:

7.1. Service providers who help us run the clinic — including our website host (Squarespace), our online booking and scheduling provider (Squarespace Scheduling / Acuity), our payment providers, our website analytics provider, and our email and SMS providers. These providers act on our instructions under appropriate data-protection terms.

7.2. Meta Platforms, where you contact us through Facebook or Instagram adverts or lead forms, or where we measure advertising performance.

7.3. Other healthcare professionals — where your care requires onward treatment (for example a referral to the NHS or a private clinician), as described in our Terms & Conditions.

7.4. Professional advisers, regulators or authorities — where we are required to do so by law, or to establish, exercise or defend legal claims.

08International transfers

Some of our service providers (for example Meta and certain analytics tools) may process your information outside the UK and European Economic Area. Where they do, we rely on appropriate safeguards — such as UK adequacy regulations or Standard Contractual Clauses — to ensure your information remains protected.

09How long we keep your information

9.1. We keep your clinical and treatment records for as long as is necessary to provide your care and to meet our legal and professional obligations — generally for a minimum of eight years after your last treatment, and longer where guidance requires.

9.2. Enquiry and marketing information is kept until you ask us to stop contacting you or withdraw your consent, after which it is deleted or anonymised.

10How we protect your information

We use appropriate technical and organisational measures to keep your information secure and to prevent unauthorised access, loss or misuse. Access to clinical records is limited to staff who need it to provide your care, and our providers are required to maintain suitable security.

11Your rights

Under UK data-protection law you have the right to: access the information we hold about you; have inaccurate information corrected; ask us to erase information or restrict how we use it; object to certain processing; request portability of information you gave us; and withdraw any consent you have given. You also have the right not to be subject to solely automated decisions with legal or similarly significant effects.

To exercise any of these rights, contact us using the details in section 1. We will respond within one month. There is usually no charge, although we may ask you to verify your identity first.

12Complaints

We hope to resolve any concern you have about your data directly — please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator, at ico.org.uk, by phone on 0303 123 1113, or at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

13Children

Our services and website are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18.

14Changes & how to contact us

14.1. We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.

14.2. For any questions about this policy or your personal information, contact us at [your contact email] or on 0161 843 8697.