Privacy policy.
[Last updated: 06/02/2026]
ENT Aesthetics (“I”, “me”, “my”) is committed to protecting your privacy and handling your personal data lawfully, fairly, and transparently. This Privacy Policy explains how your information is collected, used, stored, and protected when you visit my website, contact me, or receive injectable aesthetic treatments.
I act in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the principles of good clinical governance as promoted by the Joint Council for Cosmetic Practitioners (JCCP) and expected by the Care Quality Commission (CQC).
About the Practitioner (Data Controller)
I am a sole practitioner providing non-surgical injectable aesthetic treatments.
Business name: ENT Aesthetics Ltd
Practitioner: Miss Katharine Hamlett
BMBS, BMedSci, MRCS (ENT), PgDip MedEd, Mch ENT (Hons)
Registration body (if applicable): GMC 7420070
Email: enquires@ENT-Aesthetics.com
Clinic Address: Face Values, 138 Moss Ln, Hale, Altrincham WA15 8AN
I am the Data Controller responsible for your personal data.
Information Collected
Personal Information
● Full name
● Date of birth
● Contact details (email, telephone, address)
Medical & Clinical Information (Special Category Data)
In line with JCCP standards and safe practice, I collect:
● Medical history and contraindications
● Consultation notes and clinical assessments
● Informed consent documentation
● Treatment plans and records
● Details of injectable products, batch numbers, and treatment dates
● Records of any adverse events or follow-up care
● Before-and-after clinical photographs (with explicit consent)
Booking & Payment Information
● Appointment history
● Payment confirmations
Full payment card details are not stored by me, they are stored securely through my secure client patient platform Pabau.
Website & Communications
● Enquiries submitted via contact forms
● Email or social media correspondence
● IP address and limited website usage data
Purpose of Processing
Your information is processed to:
● Assess suitability for injectable treatments
● Provide treatments safely and in accordance with clinical guidelines
● Maintain accurate, contemporaneous clinical records
● Monitor outcomes and manage aftercare
● Comply with insurance, professional, and regulatory obligations
● Communicate essential information relating to your care
Legal Basis for Processing
Under UK GDPR, your data is processed on the following lawful bases:
● Consent – for consultations, treatment, and photography
● Contract – to provide services you request
● Legal obligation – to meet record-keeping, safety, and regulatory requirements
● Legitimate interests – to operate a safe, ethical, and professionally governed practice
Medical and treatment information is processed as special category data with enhanced safeguards.
Clinical Records & Data Retention
Clinical records are retained in accordance with professional standards, insurance requirements, and JCCP guidance, on a secure patient platform Pabau.
● Adult treatment records are retained for a minimum of 7 years
● Records relating to complications or adverse events may be retained longer where clinically or legally required
All data is securely destroyed once retention periods expire.
Data Storage & Security
Your data is stored securely using:
● Encrypted, 3-factor authentication, password-protected digital systems
● Secure practice management or booking software
● Restricted access limited to the practitioner
Appropriate technical and organisational measures are in place to protect against unauthorised access, loss, or misuse.
Sharing of Information
Your personal data is never sold or shared for commercial gain.
Information may be shared where necessary with:
● Medical professionals involved in your care
● Emergency services if required for patient safety
● Professional indemnity insurers
● Regulatory or legal authorities where required
All disclosures are made in line with confidentiality obligations and data protection law.
Marketing & Communication
Marketing communications are sent only where explicit consent has been provided.
You may withdraw consent at any time by:
● Using the unsubscribe link in emails
● Contacting me directly
Withdrawal of marketing consent does not affect clinical communications related to your care.
Clinical Photography
Clinical photographs are taken only with informed, written consent.
Photographs may be used for:
● Clinical documentation
● Treatment monitoring
● Professional or educational purposes
● Marketing or social media (only where separately agreed)
Consent may be withdrawn at any time for non-clinical use.
Your Rights Under UK GDPR
You have the right to:
● Access your personal data
● Rectify inaccurate or incomplete data
● Request erasure of data (subject to clinical and legal retention requirements)
● Restrict or object to certain processing
● Withdraw consent at any time
You also have the right to raise a concern with the Information Commissioner’s Office (ICO). This company is registered with the ICO.
www.ico.org.uk
Requests can be made via:
Email: enquiries@ENT-Aesthetics.com
Cookies & Website Analytics
This website uses cookies which are small files or pieces of text that are placed on a computer/mobile device when a visitor accesses a website or app. These are commonly used to allow websites to function efficiently. For information about viewing the cookies dropped on your device, visit the cookies Squarespace uses.
These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
You can manage cookies through your browser settings.
Policy Updates
This Privacy Policy is reviewed regularly to ensure continued compliance with regulatory guidance and best practice.
The most current version will always be available on this website.
Contact
For any questions regarding this Privacy Policy or how your information is handled, please contact:
ENT Aesthetics
Email: Enquiries@ENT-Aesthetics.com
Clinic Address: Face Values, 138 Moss Ln, Hale, Altrincham WA15 8AN