Privacy Policy

R&A Clinic Ltd

Last updated: 15th April 2026

1. Introduction

Welcome to R&A Clinic Ltd. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website, contact us, or use our medical aesthetic services.

We process personal data in accordance with applicable data protection laws, including the UK
General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Collecting and Using Personal Information

We do not collect personal information about you unless you voluntarily provide it. Any personal information you provide will be used only for the purpose stated at the point of collection.

What We Mean by Personal Information

Personal information includes data that identifies you, such as:

  • Name
  • Address
  • Email address
  • Telephone number
  • Medical or treatment-related information (where applicable)

How We Use Your Information

We may use your personal data to:

  • Provide consultations and treatments
  • Respond to enquiries
  • Deliver requested services or information
  • Manage appointments
  • Maintain medical and treatment records
  • Improve our services and website functionality
  • Comply with legal and regulatory obligations

We will not sell, rent, or trade your personal information. We may share your data only where:

  • You have given explicit consent
  • It is necessary for service providers to perform functions on our behalf
  • It is required or permitted by law

All third parties are required to protect your data and use it only for the intended purpose.

3. Medical Data (Special Category Data)

As a medical clinic, we may collect sensitive health-related information. This data is processed only:

  • With your explicit consent
  • For the purpose of providing safe and appropriate treatments
  • In compliance with strict confidentiality and legal obligations

4. Your Email Communications

If you contact us via email:

  • Your message may be shared with relevant staff members to ensure your enquiry is handled appropriately.
  • Standard email communications may not always be secure during transmission.

We recommend that you avoid sending sensitive or confidential medical information via standard email. Where necessary, we will provide alternative secure methods of communication.

Any communication sent from R&A Clinic involving medical history or sensitive information will be sent securely via our practice management system or through Egress secure email services.

5. Website Usage Data, Cookies, and Tracking

Usage Data

We may collect non-identifiable information such as:

  • Pages visited
  • Time spent on the website
  • Browser type

This helps us improve our website and services. Cookies

Our website uses cookies to enhance your experience. Cookies:

  • Help recognise repeat visitors
  • Store preferences
  • Provide anonymised analytics

You can disable cookies in your browser settings, although this may affect website functionality.

Analytics

We may use tools such as Google Analytics to understand website usage. This data is anonymized and does not identify individuals.

6. Contact Forms and Communications

Information submitted through our contact forms is used solely for:

  • Responding to enquiries
  • Providing customer service

These communications are not used for marketing unless you have given explicit consent.

7. Comments and User Interactions

If you leave comments on our website, we may collect:

  • The data shown in the form
  • Your IP address
  • Browser information (for security and spam prevention)

8. Embedded Content

Our website may include embedded content (e.g., videos or social media feeds). These external platforms may:

  • Collect data about you
  • Use cookies
  • Track your interaction

We do not control these third-party privacy practices.

9. Data Sharing and Third Parties

We only share limited data with trusted third parties where necessary, including:

  • IT and website hosting providers
  • Appointment or booking systems
  • Payment processors (if applicable)

We ensure all third parties comply with data protection laws

10. Data Retention

We retain your personal data only for as long as necessary:

  • Medical records are kept in line with healthcare regulations
  • General enquiries are retained for customer service purposes
  • You may request deletion where legally permissible

11. Data Security

We take appropriate security measures, including:

  • SSL encryption (HTTPS)
  • Secure storage systems
  • Restricted staff access

In the event of a data breach, we will act promptly and notify affected individuals where required.

12. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (where legally permitted)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise your rights, please contact us using the details below

13. Third-Party Links

Our website may contain links to external websites. We are not responsible for their privacy practices or content. Please review their policies before providing personal data.

14. Legal Disclosure

We may disclose your personal data if required to:

  • Comply with legal obligations
  • Respond to lawful requests from authorities
  • Protect our legal rights

15. Contact Information

If you have any questions about this Privacy Policy or your personal data, please contact:

R&A Clinic Ltd

Address: 1 Malvern Court, 31 Onslow Square, South Kensington SW7 3HU

Email: info@randaclinic.com

Telephone: 0207 050 0738

16. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date

 

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.