Privacy policy

This Privacy Policy explains how Sorellina Clinic Ltd collects, uses, stores and protects your personal data. We comply fully with UK GDPR and the Data Protection Act 2018.

1. What Data We Collect

a) Identity and Contact Data

• Full name, date of birth, email, phone number and address
• Correspondence via email, phone or in-person

b) Health and Medical Data (Special Category)

• Medical history, medications and allergies collected via consent forms
• Treatment records, clinical notes and photographs

c) Financial Data

• Payment card details processed via Stripe — we never store full card numbers

2. How We Use Your Data

• To provide treatments — contract performance
• To process payments and hold slots — contract performance
• To maintain clinical records — legal obligation and vital interests
• To process health data — explicit consent (special category)
• To send confirmations — legitimate interests
• Marketing communications — consent only

3. Your Rights Under UK GDPR

• Right of access — request a copy of your data
• Right to rectification — request correction of inaccurate data
• Right to erasure — subject to legal retention obligations
• Right to restriction, portability and to object
• Right to withdraw consent at any time

Contact: support@sorellinaclinic.com. Responses within 30 days. You may also complain to the ICO at ico.org.uk or 0303 123 1113.

4. Retention

• Clinical records: minimum 8 years from last treatment
• Financial records: 7 years (HMRC requirement)
• Marketing data: until consent is withdrawn

5. Third Parties

• Stripe Inc. — payment processing (PCI DSS Level 1)
• Fresha — our external appointment-booking platform. Booking and payment information entered on Fresha is processed there under its privacy information.
• Netlify — website hosting, serverless form processing and storage of submitted consent records in Netlify Blobs.
• Resend — delivery of consent-form copies to the clinic and the submitting client, and messages from the site's lead forms.
• Google Analytics and Microsoft Clarity — optional website analytics and usability measurement, enabled only with analytics consent.
• Google Ads — optional advertising measurement, enabled only with advertising consent.
• Regulators and insurers only where required by law

6. Cookies and your choices

You can accept or reject optional cookies, or choose analytics and advertising separately. Use “Cookie preferences” in the footer at any time to change your choice. Rejecting optional cookies does not prevent you from viewing the site or following a booking link.

Essential local storage remembers your cookie choices in this browser until you change them or clear the browser's site data. Optional Google Analytics and Microsoft Clarity tools help us understand visits and site usability. Optional Google Ads measurement records advertising interactions, including clicks on the clinic's telephone links.

Booking-link clicks are measured separately from completed appointments. Completed-booking measurement depends on the configuration and consent choices on Fresha. Your clinic-site cookie choices do not change your choices on Fresha or Dermalogica.

The site does not load analytics or advertising tags on clinical consent-form pages. Names, email addresses, treatment selections and medical details entered into our forms are not included in the site's custom analytics events. Consent records are processed separately through the clinic's consent-submission service.

When you withdraw a category, the site stops its related event dispatch, clears accessible first-party measurement cookies and reloads to stop loaded tools. Cookies controlled by other websites may need to be managed on those websites or through your browser.

Our Dermalogica links contain an affiliate reference. If you choose to follow one, you visit Dermalogica's website, which has its own privacy and cookie information.

7. Contact

Sorellina Clinic Ltd · 211 Shirland Road, London W9 3JP
support@sorellinaclinic.com · 020 3621 3278