Privacy Policy

This Privacy Policy explains how Sorellina Clinic Ltd collects, uses, stores and protects your personal data. We comply fully with UK GDPR and the Data Protection Act 2018.

1. What Data We Collect

a) Identity and Contact Data

• Full name, date of birth, email, phone number and address
• Correspondence via email, phone or in-person

b) Health and Medical Data (Special Category)

• Medical history, medications and allergies collected via consent forms
• Treatment records, clinical notes and photographs

c) Financial Data

• Payment card details processed via Stripe — we never store full card numbers

2. How We Use Your Data

• To provide treatments — contract performance
• To process payments and hold slots — contract performance
• To maintain clinical records — legal obligation and vital interests
• To process health data — explicit consent (special category)
• To send confirmations — legitimate interests
• Marketing communications — consent only

3. Your Rights Under UK GDPR

• Right of access — request a copy of your data
• Right to rectification — request correction of inaccurate data
• Right to erasure — subject to legal retention obligations
• Right to restriction, portability and to object
• Right to withdraw consent at any time

Contact: support@sorellinaclinic.com. Responses within 30 days. You may also complain to the ICO at ico.org.uk or 0303 123 1113.

4. Retention

• Clinical records: minimum 8 years from last treatment
• Financial records: 7 years (HMRC requirement)
• Marketing data: until consent is withdrawn

5. Third Parties

• Stripe Inc. — payment processing (PCI DSS Level 1)
• EmailJS — appointment confirmations
• Regulators and insurers only where required by law

6. Contact

Sorellina Clinic Ltd · 211 Shirland Road, London W9 3JP
support@sorellinaclinic.com · 020 3621 3278