Privacy Policy

01 Who we are

This website is operated by MILLICENT DAVENPORT AESTHETICS LTD, a company registered in England and Wales under company number 14626868, whose registered office is 54 St. Marys Park, Louth, England, LN11 0EF. In this policy, "we", "us" and "our" mean that company, trading as Millicent Davenport Aesthetics.

Our clinic is at 6 Eastgate, Louth, LN11 9NE. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018) we are the data controller for the personal information described here. If anything below is unclear, or you would like to exercise any of your rights, contact us at contact@millicentdavenportaesthetics.co.uk.

02 Clinical records are handled separately

This policy covers the personal data this website collects. It does not cover the clinical records we keep about treatments carried out at the clinic. Those records are held under our clinical governance and professional obligations as a Registered Nurse Prescriber, are kept securely and separately from this website, and are never stored in it.

If you would like details of how your clinical records are held, ask us at your appointment or contact us directly.

03 How appointments are booked

Appointments are arranged directly with the clinic: by telephone, by email, or through the enquiry form on our Contact page. There is no automated booking system on this website, so nothing you send us is processed by a third-party booking company.

We do not process payments, store card details, or hold financial information of any kind on this website.

04 What information we collect

We collect only what we need in order to answer you and to keep the website working. There are two ways information reaches us through this site.

When you contact us directly

If you complete the enquiry form on our Contact page, or email us, we collect the details you choose to give us:

your name
your email address
your telephone number, if you choose to share it
the treatment you are interested in, if you tell us
a preferred date or time, if you tell us
anything else you write in your message

Information collected automatically

Like any website, ours is served by a web host that keeps standard server logs. These may record your IP address, browser and device type, the pages you requested and the time of the request. They are used to keep the site secure and working, and are not used to identify you.

What we do not collect

We do not ask for medical information through this website, and you should not send clinical details through the enquiry form. We do not take payments through this website, and we do not run advertising or analytics tracking on it.

05 How we use your information

We use the personal information you send us for the following purposes, and nothing else.

To respond to your enquiry: if you contact us, we use your details to reply and answer your question.
To arrange your consultation or treatment: where that is what you have asked us about, we use your details to agree a time and confirm it with you.
To keep the website working: server logs are used to keep the site secure and to diagnose faults.
To comply with legal obligations: where we are required to keep records or respond to a lawful request.

06 Our lawful bases for processing

Under the UK GDPR we must have a lawful basis for using your personal information. Depending on the situation, we rely on:

Legitimate interests: responding to an enquiry you have chosen to send us, keeping our website secure, and the general running of the clinic. You can object to this at any time.
Steps prior to entering a contract: where your enquiry is about arranging a consultation or booking a treatment.
Consent: for any non-essential cookies, which are covered in our Cookie Policy. You can withdraw consent at any time.
Legal obligation: where we are required by law to keep or disclose information.

07 Who we share your information with

We do not sell your personal information, and we do not pass your details to any third party for marketing purposes. We share it only where it is necessary to run the clinic:

Our web host and email provider: who run the infrastructure this website and our email depend on, and act on our instructions.
The clinic team: enquiries are delivered to our clinic email account and read by Millicent and the team members who need to see them in order to reply.
Professional advisers: such as our accountants or legal advisers, where required.
Authorities: where we are legally required to disclose information, or where it is necessary to establish, exercise or defend legal claims.

08 Third-party content on this site

Our Contact page can show a Google map so you can find the clinic. If it loads, Google receives your IP address and may set cookies on your device, under Google’s own privacy policy rather than ours. That is why it does not load unless you allow it: until you do, you see a placeholder with our address and a button to load the map just that once.

Nothing else on this website is loaded from another company. The typefaces are served from our own website rather than from Google’s font service, so no request goes to Google when you open a page, and there is no analytics, advertising or tracking package of any kind.

Links to our Facebook and Instagram pages are ordinary links. Nothing is loaded from those platforms unless you click through to them.

09 How long we keep your information

How long we hold something depends on what it is. If you go on to become a client, the record of your treatment is held under our clinical record-keeping obligations rather than under this policy.

Enquiries: kept for as long as we need them to deal with your enquiry and any follow-up, and no longer than 24 months from your last contact, after which they are deleted.
Server logs: kept for a short period by our host as part of normal operation.
Backups: held on a rolling cycle and overwritten in turn.

10 Your rights

Under UK data protection law you have the right:

to be informed about how your data is used, which is what this policy is for
to ask what personal data we hold about you, and get a copy of it
to have inaccurate information corrected
to ask us to delete data where there is no good reason for us to keep it
to ask us to restrict how we use it
to object to us using it, including for direct marketing, which you can object to at any time with no reason given
to ask for your data in a portable format
to withdraw consent at any time, where we relied on consent

11 How to complain to the ICO

To exercise any of the rights above, contact us at contact@millicentdavenportaesthetics.co.uk. We will respond within one calendar month. There is no charge, unless a request is clearly unfounded or excessive.

If you are not happy with how we have handled your personal information, you can complain to the UK’s data protection regulator, the Information Commissioner’s Office, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.

12 Cookies

Cookies and similar technologies are covered separately in our Cookie Policy.

13 Children

This website is not directed at children. We do not provide injectable treatments to anyone under 18, and we do not knowingly collect personal data from children through this site.

14 Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date shown on this page will always reflect the most recent change, and if we make a significant one we will make that clear here.