Privacy Policy

1. Who we are

KREA Medical Aesthetics is a trading name of Juve Healthcare Ltd, registered in England and Wales (company no. 14092251), registered office 85 Sherbrooke Way, Worcester Park, KT4 8FJ. Juve Healthcare Ltd is the data controller for the personal information described in this policy.

If you have any questions about this policy or your information, please contact us at hello@kreamedicalaesthetics.co.uk or on 07478 132321.

2. What information we collect

• Contact and identity details: your name, date of birth, address, email address and phone number.
• Health information: your medical history, medications, allergies and anything else you tell us that is relevant to your care.
• Clinical records: consultation notes, consent forms, treatment details, product batch numbers and aftercare correspondence.
• Clinical photographs taken before and after treatment.
• Appointment and payment records. We do not store your full card details; payments are handled by our payment provider.
• Messages you send us through our website contact form, email or WhatsApp.
• Website information collected by cookies (see section 9).

3. Why we use your information

• To provide your consultation and treatment safely and keep clinical records. This is necessary to deliver the service you have asked for and to meet our legal and professional obligations. Health information is special category data. We process it because it is necessary for the provision of health care by a registered health professional who is bound by a duty of confidentiality (UK GDPR Article 9(2)(h)).
• To respond to your enquiries and manage your appointments. This is necessary to provide the service you have requested.
• To keep financial and business records, as required by law.
• To handle complaints, insurance matters and legal claims, which is in our legitimate interests and, where health information is involved, necessary for establishing or defending legal claims.
• To send you news or offers, only if you have opted in. You can unsubscribe at any time.
• To use your photographs on our website or social media, only with your separate written consent, which you can withdraw at any time. We never use clinical photographs for marketing without this consent.

4. Who we share your information with

We never sell your information. We only share it where necessary, with:

• the registered pharmacy that supplies any medicine prescribed for you;
• your GP or another healthcare professional, where clinically necessary and normally with your consent;
• emergency services, if you need urgent care;
• Charterhouse Clinic London, where your appointment takes place, limited to your name and appointment time;
• our insurers and professional advisers, if needed for a claim or complaint;
• regulators such as the Nursing and Midwifery Council, or others where the law requires it;
• trusted service providers who help us run the practice (for example website hosting, email, booking and payment), who may only use your information on our instructions.

5. Transfers outside the UK

Some of our service providers may store information outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contract terms.

6. How long we keep your information

• Clinical records, including consent forms and photographs: 8 years after your last treatment, in line with NHS records guidance for adults, or longer if the law or our insurers require it.
• Financial records: 6 years, as required by law.
• Enquiries that do not lead to a consultation: up to 12 months.

7. Keeping your information safe

Your information is stored securely, on password-protected systems, and can only be accessed by the practitioner caring for you and those who need it to provide your care or run the practice.

8. Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information (we may need to keep clinical records for the period in section 6);
• ask us to restrict or stop using your information, or object to how we use it;
• ask us to transfer your information to another provider;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email hello@kreamedicalaesthetics.co.uk. We will respond within one month, and there is normally no charge.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). We would appreciate the chance to put things right first.

9. Cookies

Our website uses cookies to make it work and to understand how it is used. You can choose which non-essential cookies to accept through the cookie banner, and change your browser settings at any time.

10. Age

Our services are for adults aged 18 and over only. We do not knowingly collect information from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.