Privacy Policy

Last updated: 2026

iQonic Aesthetics ("iQonic", "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website (www.iqonicaesthetics.com), enquire about or receive treatment from us, or otherwise interact with us.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and the Data (Use and Access) Act 2025.

1. Who we are

The data controller responsible for your personal data is:

• Company name: iQonic Aesthetics Ltd
• Company registration number: 12915747 (registered in England & Wales)
• Registered office: Lakeview House, 4 Woodbrook Crescent, Billericay, Essex, CM12 0EQ
• Telephone: +44 1844 335100
• Email: [email protected]

We operate from the following clinic locations:

• iQonic – Fitzrovia Hospital, 13–14 Fitzroy Square, London W1T 6AH
• iQonic – Fitzroy Square, 1 Fitzroy Square, London W1T 5HF
• iQonic – 15 Harley Street, London W1G 9QQ
• iQonic – Princes Risborough, Unit E3 Regent Park, Princes Risborough, HP27 9LE
• iQonic – Farringdon, 49 Mount Pleasant, London, WC1X 0AE
• iQonic – Manchester Private Hospital, New Court, Regents Place, 2 Windsor Street, Salford, M5 4HB [verify first word of address — partially cut off in source]
• iQonic – Langham Hospital, 77 Hallam St, London, W1W 5HB

2. How to contact us about your data

For any questions about this policy, your personal data, or to exercise your rights, please contact our data protection lead:

• Email: [email protected] [interim — a dedicated address such as [email protected] or [email protected] is recommended]
• Postal address: Lakeview House, 4 Woodbrook Crescent, Billericay, Essex, CM12 0EQ

3. The personal data we collect

Depending on how you interact with us, we may collect:

Identity and contact data — your name, date of birth, postal address, email address, telephone number.

Enquiry and booking data — the treatments you are interested in, the content of your enquiry, appointment and consultation details, and communications between you and us.

Health data (special category data) — information about your medical history, current health, the treatments you are considering or receiving, photographs and 3D imaging used for assessment and visualisation, clinical notes, and outcomes of care. Under Article 9 of the UK GDPR this is "special category" data and is given a higher level of protection.

Website and technical data — IP address, browser type, device information, and information about how you use our website, collected through cookies and similar technologies (see our Cookie Policy).

Marketing preferences — your preferences for receiving communications from us.

4. How we collect your data

We collect personal data when you:

• complete a contact, enquiry or booking form on our website;
• request or attend a consultation or treatment;
• use the Adoreal patient portal;
• use the Crisalix 3D imaging/visualisation tool (where offered);
• contact us by phone, email or in person;
• browse our website (via cookies — see our Cookie Policy).

5. Why we use your data and our lawful bases

We only use your personal data where the law allows us to. The lawful bases we rely on under Article 6 of the UK GDPR are:

PurposeLawful basis (Article 6)Responding to your enquiries and booking requestsConsent, and/or steps taken at your request prior to entering a contractProviding consultations, treatment and aftercarePerformance of a contractManaging your patient record and the patient portalPerformance of a contract / legitimate interestsSending you service communicationsPerformance of a contract / legitimate interestsSending you marketing (where you have agreed)ConsentMeeting our legal and regulatory obligations (e.g. CQC, clinical record-keeping)Legal obligationImproving and securing our websiteLegitimate interests

Health data — additional condition

Because health data is special category data, we also rely on an additional condition under Article 9 of the UK GDPR. Depending on the context this will be:

• Article 9(2)(a) — your explicit consent (for example, when you submit health information through an enquiry or booking form); and/or
• Article 9(2)(h) — the provision of health care and treatment, where processing is carried out by or under the responsibility of a health professional bound by a duty of confidentiality.

6. Sharing your data

We do not sell your personal data. We share it only where necessary, with:

• Our clinicians and surgeons, who provide your consultation, treatment and aftercare. [CONFIRM: name(s) of responsible clinician(s), e.g. Adrian Richards, if to be listed.]
• Adoreal, our technology partner, which provides and operates the patient portal (my.adoreal.com) and elements of our digital infrastructure.
• Crisalix, where you use the 3D imaging/visualisation service, which processes the images and data you provide for that purpose.
• Service providers who support us, such as our website host, consent management provider (Cookiebot), appointment/booking system, email and IT providers — acting as processors under contract.
• Chrysalis Finance Limited, where you apply for patient finance. iQonic Aesthetics Ltd is an Appointed Representative of Chrysalis Finance Limited, which is authorised and regulated by the Financial Conduct Authority. If you apply for finance, the personal data needed to process your application is shared with Chrysalis Finance.
• Regulators, professional bodies and authorities (e.g. the CQC) where we are legally required to do so.

All third parties acting as our processors are required by contract to keep your data secure and use it only as instructed by us.

7. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out in this policy and to meet our legal, regulatory and professional obligations.

• Health and clinical records: retained in line with applicable professional and regulatory record-keeping requirements.
• Enquiry and marketing data
• Website/technical data: as set out in our Cookie Policy.

8. Your rights

Under UK data protection law you have the right to:

• be informed about how we use your data;
• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us using the details in Section 2. We will respond within the timescales required by law. Where we need further information to deal with a request, the response time may be paused until you provide it.

9. Complaints

If you have a concern about how we handle your personal data, you have the right to complain to us directly. Please contact our data protection lead (Section 2). We will acknowledge your complaint within 30 days and take appropriate steps to respond to it.

You also have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would, however, appreciate the chance to address your concerns before you approach the ICO.

10. Cookies

Our website uses cookies and similar technologies. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Significant changes will be communicated where appropriate.

‍