Privacy Policy
Last updated: 2 June 2026
Who we are
HADA Aesthetics is a medical aesthetics clinic based at 76 Leigh Road, Leigh-on-Sea, Essex SS9 1BZ. In this policy, "we", "us" and "our" mean HADA Aesthetics. We are the data controller for the personal data we hold about you.
What data we collect
We may collect: your name, contact details (phone, email, address) and date of birth; enquiry and booking details; and health information relevant to your treatment (medical history, medications, allergies, consent records and before/after photographs where you agree to them). We also collect website usage data (pages visited, device and approximate location) via cookies and analytics.
How we use your data
We use your data to provide and manage your treatments and aftercare, to respond to enquiries, to take bookings and payments, to meet our clinical, insurance and legal obligations, and — only with your consent — to send you marketing. Health data is special-category data; we process it on the basis of explicit consent and for the provision of healthcare.
Sharing your data
We do not sell your data. We may share it with our booking and payment providers (e.g. Pabau), our insurers, and regulatory or medical bodies where required by law. All processors are bound to keep your data secure.
How long we keep it
Clinical and consent records are retained in line with professional and insurance requirements (typically a minimum of 8 years, or longer for certain records). Enquiry and marketing data is kept only as long as necessary.
Your rights
You have the right to access, correct, erase or restrict the use of your data, to object to processing, and to data portability. You can withdraw marketing consent at any time. To exercise any right, contact us at jason@microscalpessex.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Contact
For any privacy question, email jason@microscalpessex.co.uk or call 01702 244868.
This policy is provided as a starting point and should be reviewed by the clinic's own legal/compliance advisor before going live.