Privacy Policy

Rejuvenation Medi-Spa

Effective Date: 10/07/2026

Rejuvenation Medi-Spa is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store and protect your personal information when you use our website, client booking app, or receive treatments and services from us.

By using our website or booking app, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Who We Are

Rejuvenation Medi-Spa is a medical-led aesthetics and skin clinic providing aesthetic, skincare and wellness treatments.

Data Controller: Rejuvenation Medi-Spa

Email: jeanette@rejuvenationmedi-spa.com

Telephone: 07886933119

Website: https://www.rejuvenationmedi-spa.com/

2. Information We Collect

Depending on how you interact with us, we may collect:

Personal Information

• Name

• Date of birth

• Postal address

• Email address

• Telephone number

Appointment Information

• Appointment history

• Treatment preferences

• Booking requests

• Consultation notes

• Communications with our clinic

Medical Information

Where necessary for treatment safety, we may collect health information including:

• Medical history

• Medications

• Allergies

• Lifestyle information

• Consent forms

• Treatment records

• Before and after photographs

We collect health information only where it is necessary to assess your suitability for treatment, ensure your safety, maintain accurate clinical records and comply with our professional and legal obligations. Health information is treated as special category data under UK GDPR and receives additional protection.

Payment Information

Payments are processed securely through our payment provider. We do not store full debit or credit card details on our systems. You may upload your card details to the app if you wish to do so.

Technical Information

When you use our website or booking app, we may automatically collect:

• Device type

• Operating system

• IP address

• App usage information

• Browser type

• Cookies and similar technologies

3. How We Use Your Information

We use your information to:

• Book and manage appointments

• Provide safe and appropriate treatments

• Verify your identity

• Maintain accurate medical records

• Send appointment confirmations and reminders

• Process payments

• Respond to enquiries

• Improve our services

• Comply with legal and regulatory obligations

• Prevent fraud and protect our business

Where you have given permission, we may also send promotional offers, newsletters or information about new treatments. You can opt out at any time.

4. Legal Basis for Processing

We process your information under one or more of the following lawful bases:

• Performance of a contract

• Compliance with legal obligations

• Legitimate interests

• Your consent

• Provision of healthcare and treatment services where applicable

5. Booking App

Our online booking system and client app are securely provided by Zenoti, a third-party appointment management platform used to manage bookings, client records, appointment reminders and communications.

When you use our booking app, your personal information is securely stored and processed within the Zenoti platform on our behalf. This may include your name, contact details, appointment history, treatment records, consultation forms, consent forms and any other information necessary to provide our services safely and effectively.

Zenoti acts as a data processor, processing your personal information only on our instructions and in accordance with applicable data protection laws.

6. Notifications

If you enable notifications within the app, we may send:

• Appointment reminders

• Booking confirmations

• Appointment changes

• Important service updates

You can disable notifications at any time within your device settings.

7. Sharing Your Information

We never sell your personal information.

We may share your information with carefully selected third-party service providers who help us operate our business, including:

• Zenoti, our secure appointment booking and client management platform

• Secure payment providers

• IT support providers

• Website hosting providers

• Professional advisers

• Regulatory authorities where required by law

All third-party providers are required to process your information securely, confidentially and in accordance with UK data protection legislation.

8. Data Security

We take appropriate technical and organisational measures to protect your personal information against:

• Unauthorised access

• Loss

• Misuse

• Disclosure

• Alteration

• Destruction

These include secure systems, password protection, encrypted data where appropriate and restricted staff access.

9. Data Retention

We only keep your information for as long as necessary to:

• Provide our services

• Meet legal obligations

• Resolve disputes

• Maintain appropriate medical records

Treatment records are retained in accordance with UK legal and professional guidance.

10. Your Rights

Under UK GDPR you have the right to:

• Access your personal information

• Request correction of inaccurate information

• Request deletion of your information where appropriate

• Restrict processing

• Object to processing

• Request transfer of your information (data portability)

• Withdraw consent where consent is the legal basis

To exercise your rights, please contact us using the details above.

11. Cookies

Our website may use cookies to improve your browsing experience and analyse website performance.

You can control cookies through your browser settings.

12. Children's Privacy

Our services are not intended for children under the age of 18 without appropriate parental or guardian consent where applicable.

13. Third-Party Services

Our website or app may contain links to third-party websites or services. We are not responsible for the privacy practices of those websites.

14. International Transfers

Some of our trusted service providers, including Zenoti, may process or store personal information outside the United Kingdom.

Where this occurs, appropriate safeguards are in place to protect your information, including the use of recognised international data transfer mechanisms approved under UK data protection law, ensuring your personal information remains protected.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page with a revised effective date.

16. Contact Us

If you have any questions about this Privacy Policy or how we use your information, please contact us.

17. Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve your concerns.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection matters.