Privacy Policy

Who we are

Perfectus Derma Aesthetics ("we", "our", "us") is a nurse-led medical aesthetics clinic at 111 Charing Cross Road, Soho, London WC2H 0DT. The clinic is operated by PERFECTUS DERMA LIMITED (Companies House 14447641). Our data controller contact is info@perfectusderma.com.

What personal data we collect

• Contact details you provide when booking (name, email, phone)
• Medical history and relevant health information required for safe treatment, including prescribing records where prescription treatment is provided
• Clinical photographs and facial-analysis scans (3D Visage, MC10) taken with your written consent
• Booking and payment information processed securely via Aesthetic Nurse Software, our practice management and booking system, and, where you choose them, Klarna or Clearpay
• Messages you send us by WhatsApp, email, or through our booking system
• Website analytics: only after you accept the consent banner, via PostHog (EU region). We capture page views, clicks on call/WhatsApp/booking buttons, and aggregated browsing patterns. We never capture form-input text, names, addresses, or any clinical detail.

How we use your data

Your personal and medical data is used solely to provide safe clinical treatment, to meet our legal record-keeping obligations, and to keep you informed about your own care and appointments. We do not sell data and we do not share data with third parties for marketing. Clinical photographs are never used for marketing without your separate, explicit written consent.

Your rights

Under UK GDPR you have the right to access your data, correct inaccuracies, request deletion (subject to legal retention requirements for medical records), restrict processing, and lodge a complaint with the Information Commissioner's Office. To exercise any right, contact info@perfectusderma.com.

How long we keep your data

Clinical records are retained for a minimum of 10 years from your last treatment, in line with professional record-keeping and indemnity guidance for medical aesthetics. Marketing consent can be withdrawn at any time. Website analytics data is processed by PostHog Inc. in the EU region (Frankfurt) under their EU Data Processing Addendum and retained for 7 years from collection or until you withdraw consent: whichever comes first.

Changes to this policy

This policy was last updated on 3 July 2026. Material changes will be notified to existing patients by email.