0800 4220980Book a consultation

Privacy policy

Last updated: 29 September 2026

iQonic Aesthetics (“iQonic”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website (www.iqonicaesthetics.com), enquire about or receive treatment from us, or otherwise interact with us.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and the Data (Use and Access) Act 2025.

1. Who we are

The data controller responsible for your personal data is:

  • Company name: iQonic Aesthetics Ltd
  • Company registration number: 12915747 (registered in England and Wales)
  • Registered office: 30 Upper High Street, Thame, Oxfordshire OX9 3EZ
  • Telephone: +44 800 4220980
  • Email: [email protected]

We see and treat patients at the following locations. Partner hospitals and sites are independent providers, each registered with the CQC in its own right:

  • 15 Harley Street, London W1G 9QQ
  • Farringdon, 49 Mount Pleasant, London WC1X 0AE
  • Princes Risborough, Unit E3 Regent Park, Summerleys Road, Princes Risborough HP27 9LE
  • Fitzroy Square (partner site), 1 Fitzroy Square, London W1T 5HF

2. How to contact us about your data

For any questions about this policy, your personal data, or to exercise your rights, please contact our data protection lead:

3. The personal data we collect

Depending on how you interact with us, we may collect:

Identity and contact data — your name, date of birth, postal address, email address, telephone number.

Enquiry and booking data — the treatments you are interested in, the content of your enquiry, appointment and consultation details, and communications between you and us.

Health data (special category data) — information about your medical history, current health, the treatments you are considering or receiving, photographs and 3D imaging used for assessment and visualisation, clinical notes, and outcomes of care. Under Article 9 of the UK GDPR this is “special category” data and is given a higher level of protection.

Website and technical data — IP address, browser type and device information recorded in our web host’s server logs, which we use to keep the website secure and working. The website does not use analytics or advertising cookies (see our Cookie Policy).

Marketing preferences — your preferences for receiving communications from us.

4. How we collect your data

We collect personal data when you:

  • complete a contact, enquiry or booking form on our website;
  • request or attend a consultation or treatment;
  • use the Adoreal patient portal;
  • use the 3D imaging/visualisation tool (where offered);
  • contact us by phone, email or in person;
  • browse our website (server logs only — see our Cookie Policy).

5. Why we use your data and our lawful bases

We only use your personal data where the law allows us to. The lawful bases we rely on under Article 6 of the UK GDPR are:

  • Responding to your enquiries and booking requests — consent, and/or steps taken at your request prior to entering a contract.
  • Providing consultations, treatment and aftercare — performance of a contract.
  • Managing your patient record and the patient portal — performance of a contract / legitimate interests.
  • Sending you service communications — performance of a contract / legitimate interests.
  • Sending you marketing (where you have agreed) — consent.
  • Meeting our legal and regulatory obligations (e.g. CQC, clinical record-keeping) — legal obligation.
  • Improving and securing our website — legitimate interests.

Health data — additional condition

Because health data is special category data, we also rely on an additional condition under Article 9 of the UK GDPR. Depending on the context this will be:

  • Article 9(2)(a) — your explicit consent (for example, when you submit health information through an enquiry or booking form); and/or
  • Article 9(2)(h) — the provision of health care and treatment, where processing is carried out by or under the responsibility of a health professional bound by a duty of confidentiality.

6. Sharing your data

We do not sell your personal data. We share it only where necessary, with:

  • Our clinicians and surgeons, who provide your consultation, treatment and aftercare.
  • Adoreal, our technology partner, which provides and operates the patient portal (my.adoreal.com) and elements of our digital infrastructure.
  • 3D visualisation, where you use the 3D imaging/visualisation service, which processes the images and data you provide for that purpose.
  • Service providers who support us, such as our website host, appointment and booking system, email and IT providers — acting as processors under contract.
  • Chrysalis Finance Limited, where you apply for patient finance. iQonic Aesthetics Ltd is an Appointed Representative of Chrysalis Finance Limited, which is authorised and regulated by the Financial Conduct Authority. If you apply for finance, the personal data needed to process your application is shared with Chrysalis Finance.
  • Regulators, professional bodies and authorities (e.g. the CQC) where we are legally required to do so.

All third parties acting as our processors are required by contract to keep your data secure and use it only as instructed by us.

7. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out in this policy and to meet our legal, regulatory and professional obligations.

  • Health and clinical records: retained in line with applicable professional and regulatory record-keeping requirements.
  • Enquiry and marketing data: retained for as long as needed to handle your enquiry and, for marketing, until you withdraw your consent or unsubscribe.
  • Website server logs: kept for a short period for security, then deleted.

8. Your rights

Under UK data protection law you have the right to:

  • be informed about how we use your data;
  • access a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased in certain circumstances;
  • restrict or object to certain processing;
  • data portability;
  • withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us using the details in Section 2. We will respond within the timescales required by law. Where we need further information to deal with a request, the response time may be paused until you provide it.

9. Complaints

If you have a concern about how we handle your personal data, you have the right to complain to us directly. Please contact our data protection lead (Section 2). We will acknowledge your complaint within 30 days and take appropriate steps to respond to it.

You also have the right to complain to the Information Commissioner’s Office (ICO):

  • Website: ico.org.uk
  • Helpline: 0303 123 1113

We would, however, appreciate the chance to address your concerns before you approach the ICO.

10. Cookies

Our website uses only strictly necessary browser storage. It does not use analytics or advertising cookies. For details, please see our Cookie Policy.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it was last revised. Significant changes will be communicated where appropriate.