PRIVACY POLICY

At LG Medical Aesthetics we take your privacy seriously — but we also believe in keeping things clear and straightforward.

Last updated30/09/2026

1. Who we are

LG Medical is a medical aesthetics clinic run by Leona Paget, a sole trader trading as LG Medical Aesthetics.

We are the data controller for the personal information described in this policy. That means we decide how and why your information is used, and we are responsible for looking after it.

Our details:

Business name: LG Medical Aesthetics

Address: 14 Meiklejohn Street, Causewayhead, Stirling, FK9 5HQ, Scotland, UK

Email: leonapaget1969@gmail.com

Website: lgmedicalaesthetics.co.uk

ICO registration number: ZA751219

We take your privacy seriously. The treatments we provide mean we sometimes need to hold sensitive health information, and we treat it with the care you would expect from any healthcare provider.

2. What this policy covers

This policy explains how we collect, use, share and protect your personal information when you:

visit our website, lgmedicalaesthetics.co.uk;
contact us by email, phone, website form or social media;
book a consultation or treatment, online or otherwise;
attend the clinic for a consultation or treatment; and
sign up to hear from us about offers, news and events.

It is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations 2003 (PECR).

3. The information we collect

Depending on how you interact with us, we may collect the following:

Type of information: Examples

Identity details: Name, title, date of birth, gender
Contact details: Address, email address, phone number
Booking details: Appointments booked, treatments chosen, attendance, cancellations and no shows
Payment details: Payment records and transaction history. Card payments are handled by our payment providers; we do not store your full card number.
Health and medical information: Medical history, current medications, allergies, pregnancy or breastfeeding status, previous treatments, GP details, consultation notes, consent forms, treatment records, aftercare notes and any complications
Photographs: Before, during and after treatment photographs taken for your clinical record
Communications: Emails, messages, call notes, social media messages, reviews and feedback
Marketing preferences: Whether you have agreed to receive marketing from us and how you prefer to hear from us
Technical and website data: IP address, browser and device type, pages visited, time on site, how you arrived at our website, and cookie data

Special category data

Health information and treatment photographs are classed as special category data under UK data protection law. This means they receive extra legal protection, and we only collect what we need to treat you safely and keep proper clinical records.

4. How we collect your information

Information you give us directly

when you complete a contact or enquiry form on our website;
when you book an appointment through our website or our online booking system, Aesthetic Nurse Software
when you complete a medical history questionnaire or consent form, online or in the clinic;
during your consultation and treatment;
when you email, phone or message us, including through Instagram, Facebook or other social media;
when you sign up to our mailing list; and
when you leave a review or give us feedback.

Information collected automatically: When you use our website, some information is collected automatically through cookies and similar technologies. See section 7 for details.

Information from other sources: With your knowledge, we may occasionally receive information about you from:

your GP or another healthcare professional, where this is relevant to your treatment; and
our booking and payment providers, when you book or pay online.

5. How we use your information and our legal basis

The law says we must have a valid reason, called a lawful basis, for every use of your personal information. The information below sets out what we do with your information and why.

What we use it for: Our lawful basis

Responding to your enquiries: Our legitimate interests in answering questions from potential clients, or steps taken at your request before entering a contract
Managing bookings, reminders, cancellations and payments: Performance of a contract with you
Carrying out consultations and treatments safely, including assessing suitability: Performance of a contract with you. For health data: providing health care (UK GDPR Article 9(2)(h) and Data Protection Act 2018, Schedule 1, paragraph 2)
Keeping accurate clinical records, including treatment photographs: Legal obligation and our legitimate interests in safe, accountable practice. For health data and photographs: providing health care (Article 9(2)(h))
Providing aftercare and dealing with any complications: Performance of a contract. For health data: providing health care (Article 9(2)(h))
Using before and after photographs on our website or social media: Your explicit consent only (Article 9(2)(a)). See section 6.
Sending you service messages (appointment confirmations, reminders, aftercare information): Performance of a contract
Sending you marketing emails or messages: Your consent, or for existing clients the "soft opt in" allowed under PECR for similar services. You can opt out at any time.
Running website analytics and advertising cookies: Your consent, given through our cookie banner
Keeping financial records, and meeting our legal and regulatory duties: Legal obligation
Handling complaints, insurance matters and legal claims: Our legitimate interests in protecting our business. For health data: establishing, exercising or defending legal claims (Article 9(2)(f))
Improving our website and services: Our legitimate interests in running and growing our business

Where we rely on legitimate interests, we have considered your rights and are satisfied they are not overridden. Where we rely on consent, you can withdraw it at any time; this will not affect anything we did before you withdrew it.

If you choose not to give us the health information we ask for, we may not be able to treat you, because we cannot safely assess whether a treatment is right for you.

6. Before and after photographs

Photographs are an important part of your clinical record. They help us plan treatment, monitor results and deal with any concerns.

Clinical photographs are stored securely as part of your confidential record.
We will never use your photographs in marketing, on our website or on social media unless you have given separate, explicit written consent.
Where possible, we will crop or anonymise images used in marketing. We will agree this with you first.
You can withdraw marketing consent at any time. We will remove your images from our website and our own social media accounts as soon as reasonably possible, but we cannot control copies others may already have shared.

7. Cookies and website tracking

Our website is built on the Wix platform. Cookies are small files placed on your device that help websites work and give website owners information about how they are used.

Type: What it does

Essential cookies: Needed for the website to work, for example security, bookings and remembering your cookie choices. These do not need your consent.

Analytics cookies: Help us understand how visitors use the site, for example through Google Analytics. Used only with your consent.

Marketing cookies: Such as the Meta (Facebook and Instagram) Pixel, which helps us measure and target our advertising. Used only with your consent.

When you first visit our website, a cookie banner asks for your choices. You can change them at any time through your browser settings. Blocking some cookies may affect how the site works.

8. Who we share your information with

We do not sell your personal information. We only share it where necessary, with:

Wix.com, which hosts our website, forms and online bookings;
Aesthetic Nurse Software which manages our appointments and client records;
Wix.com & Aesthetic Nurse Software which sends our newsletters (only if you have signed up);
payment providers such as Stripe to process payments;
Google and Meta, for website analytics and advertising, only where you have accepted cookies;
healthcare professionals, such as or your GP, where needed for your care and with your knowledge;
our professional advisers, such as our accountant, insurer and solicitor;
regulators and professional bodies, such as Healthcare Improvement Scotland and where we are required to; and
the police, courts or other authorities, where the law requires it, or to protect someone's vital interests in an emergency.

Our service providers only use your information on our instructions and are required to keep it secure.

9. Transfers outside the UK

Some of our providers, including Wix, Google and Meta, may store or process data outside the UK, including in the United States. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations (including the UK Extension to the EU US Data Privacy Framework, where the provider is certified) or the UK International Data Transfer Agreement or Addendum. You can contact us for more information about these safeguards.

10. How we keep your information secure

We use appropriate technical and organisational measures to protect your information, including:

password protected and, where available, two factor secured accounts for our website, booking system and email;
using reputable providers that encrypt data in transit and at rest;
keeping any paper records, such as signed consent forms, in a locked cabinet;
limiting access to your information to people who need it to provide your care; and

No system is completely secure. If a data breach affects you and is likely to put your rights at high risk, we will tell you without undue delay, and we will report it to the ICO where required.

11. How long we keep your information

We keep your information only for as long as we need it, and for as long as the law, our insurers and our professional obligations require.

When information is no longer needed, we delete or securely destroy it.

12. How we communicate with you

Service messages

We will contact you by email, text or phone about your appointments, including confirmations, reminders, changes, aftercare and follow up. These messages are part of your care and are not marketing.

Marketing messages

We will only send you news, offers and updates if you have agreed to receive them, or if you are an existing client and we are telling you about similar treatments (you will always be given a simple way to opt out).

You can unsubscribe at any time by:

clicking the "unsubscribe" link at the bottom of any marketing email;
emailing us at leonapaget1969@gmail.com

Unsubscribing from marketing will not stop essential messages about your appointments.

13. Your rights

Under UK data protection law, you have the right to:

Be informed about how we use your information (this policy does that).
Access a copy of the information we hold about you.
Rectification: ask us to correct information that is inaccurate or incomplete.
Erasure: ask us to delete your information. Please note that we may need to keep clinical records for legal and insurance reasons, even if you ask us to delete them.
Restrict how we use your information in certain circumstances.
Object to us using your information based on legitimate interests, and to object at any time to direct marketing.
Data portability: ask us to transfer information you have given us to you or another organisation, where this applies.
Withdraw consent at any time, where we rely on consent.
Complain to us and to the ICO (see section 15).

To use any of these rights, email leonapaget1969@gmail.com or write to us at the address in section 1. We may need to check your identity before we respond. We will reply within one month. For complex requests, we may extend this by up to two further months, and we will let you know if so. We do not usually charge a fee.

Automated decisions

We do not make decisions about you using solely automated processes, including profiling, that have legal or similarly significant effects on you.

14. Under 18s

We do not provide treatments to anyone under 18, and our website is not intended for children. We do not knowingly collect personal information from anyone under 18. If you think we have done so by mistake, please contact us and we will delete it.

15. Complaints and how to raise a concern

If you are unhappy with how we have handled your personal information, please tell us first so we can put it right.

You can raise a concern by email to leonagilhooley@gmail.com, by post to the address in section 1, or in person at the clinic.
We will acknowledge your complaint within 30 days of receiving it.
We will look into it without undue delay, keep you updated on our progress, and let you know the outcome.

If you are not satisfied with our response, you have the right to complain to the UK data protection regulator, the Information Commission (which continues to operate under the name Information Commissioner's Office, or ICO):

Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

The ICO usually expects you to have raised your concern with us first.

16. Links to other websites

Our website may link to other websites and social media platforms, such as Instagram, Facebook and our booking system. We are not responsible for how those sites handle your information. Please read their privacy policies.

17. Changes to this policy

We review this policy regularly and may update it to reflect changes in the law, our services or the tools we use. The latest version will always be on our website, with the date it was last updated at the top. If we make a significant change that affects how we use your information, we will let you know by email or through a notice on our website before the change takes effect.

18. Contact us

If you have any questions about this policy or how we handle your information, please get in touch:

Email: Leonapaget1969@gmail.com

Post: 14 Meiklejohn Street, Causewayhead, Stirling, FK9 5HQ, Scotland, UK

Data protection contact: Leona Paget