1. Who We Are

This Privacy Policy explains how Reset Clinical Ltd ("we", "us", "our") collects, uses, and protects your personal data when you visit our website at resetclinical.com or use our services.

Company name: Reset Clinical Ltd

Registered address: 49 Watergate Row, Chester, CH1 2LB

Contact email: [email protected]

Website: resetclinical.com

ICO Registration Number:

We are the data controller for the personal data we collect about you. We are committed to protecting your privacy and processing your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

2.1 Personal Data You Provide Directly

When you interact with us — whether through our website, booking system, or in clinic — we may collect:

Full name

Email address

Phone number

Date of birth

Billing and payment details (processed securely via Stripe)

Enquiries and messages submitted via our website or email

2.2 Health and Medical Data (Special Category Data)

As an aesthetics clinic, we process health and medical information which is classified as 'special category data' under UK GDPR. This includes:

Medical history relevant to your treatment

Contraindications and medications

Skin type, condition, and treatment history

Consultation and consent forms

Before and after photographs

We only process this data with your explicit written consent, or where necessary to protect your vital interests or to comply with a legal obligation.

2.3 Technical and Usage Data

When you visit our website, we automatically collect certain technical data, including:

IP address

Browser type and version

Pages visited and time spent on the site

Referral source (how you found our website) Device information

2.4 Marketing Data

If you opt in to marketing communications, we collect your email address and preferences to send you promotional content, offers, and updates about our services.

3. How We Collect Your Data

We collect data through the following means:

Directly from you, when you book an appointment, complete a consultation form, or contact us

Through Booksy, our online booking platform, when you schedule a treatment

Through Stripe, our payment processor, when you make a payment

Through cookies and tracking technologies on our website (see Section 6)

Through Mailgun, our email marketing platform, when you subscribe to our mailing list

4. Why We Use Your Data (Legal Bases)

Under UK GDPR, we must have a lawful basis for processing your personal data. The table below sets out the purposes for which we use your data and the legal basis for doing so:

Performance of a Contract

To process your bookings, manage appointments, deliver treatments, and process payments.

Legal Obligation

To maintain clinical and financial records as required by law, and to comply with regulatory requirements applicable to aesthetic practitioners.

Explicit Consent (Special Category Health Data)

To collect and process your medical history, treatment records, and before/after photographs. You may withdraw this consent at any time (see Section 9).

Consent (Marketing)

To send you marketing emails and updates via Mailgun. You may unsubscribe at any time using the link in any email we send.

Legitimate Interests

To monitor and improve our website performance using analytics tools, and to protect our business from fraud. We ensure our legitimate interests do not override your rights and freedoms.

5. Third Parties We Share Data With

We may share your personal data with the following trusted third-party service providers who process data on our behalf.

All processors are required to handle your data securely and only as instructed by us:

Booksy (Booking System)

We use Booksy to manage appointments and client records. Data shared includes your name, contact details, and booking history. Privacy policy: booksy.com/privacy-policy

Stripe (Payment Processing)

We use Stripe to process payments. Your payment card details are handled directly and securely by Stripe. We do not store full card numbers. Privacy policy: stripe.com/gb/privacy

Mailgun (Email Marketing)

We use Mailgun to send transactional and marketing emails. Your email address is processed by Mailgun in accordance with their privacy policy: mailgun.com/legal/privacy-policy

Google Analytics 4 (Website Analytics)

We use Google Analytics 4 to understand how visitors use our website. Data collected includes browsing behaviour and is anonymised where possible. Privacy policy: policies.google.com/privacy

Meta (Facebook) Pixel (Advertising)

We use the Meta Pixel to measure the effectiveness of our advertising and to show you relevant ads on Facebook and Instagram. This involves the collection of your browsing activity on our website. Privacy policy: facebook.com/policy.php

We do not sell your personal data to any third party. We may disclose your data to law enforcement or regulatory authorities if required by law.

6. Cookies

Our website uses cookies and similar tracking technologies to enhance your experience and collect analytics data. We use the following types of cookies:

Strictly Necessary Cookies

Essential for the website to function correctly. These cannot be disabled.

Analytics Cookies (Google Analytics 4)

Used to collect information about how visitors use our website, including pages visited and time on site. This helps us improve our website. These cookies require your consent.

Marketing Cookies (Meta Pixel)

Used to track conversions from our advertising and to show you relevant ads on Meta platforms. These cookies require your consent.

You can manage your cookie preferences through the cookie consent banner displayed when you first visit our website.

You can also adjust your browser settings to block or delete cookies at any time, though this may affect how the website functions.

7. International Data Transfers

Some of our third-party processors (including Google, Meta, and Mailgun) may transfer your data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, including

Standard Contractual Clauses (SCCs) approved by the UK Information

Commissioner's Office, or other legally recognised mechanisms to protect your data.

8. How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

Clinical and treatment records: 8 years from last appointment (or until age 25 if the client was a minor at the time — note, we do not treat minors)

Financial and payment records: 7 years in accordance with HMRC requirements

Marketing data: until you withdraw consent or unsubscribe

Website analytics data: in line with Google Analytics 4 default retention settings (up to 14 months)

Enquiry and contact data: 2 years from last contact

When your data is no longer needed, it will be securely deleted or anonymised.

9. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you

Right to rectification: to ask us to correct inaccurate or incomplete data

Right to erasure: to request deletion of your data (subject to legal obligations)

Right to restrict processing: to ask us to pause processing of your data

Right to data portability: to receive your data in a structured, machine-readable format

Right to object: to object to processing based on legitimate interests or for direct marketing

Right to withdraw consent: you may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us at: [email protected]

We will respond to all requests within one month. We may need to verify your identity before processing your request.

10. How to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk

Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO. Please reach out to us first at [email protected].

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the 'last updated' date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after any changes constitutes your acceptance of the updated policy.