Privacy policy

Last updated 2026-08-16.

Who we are

PortoClinic Aesthetics, Kings Hill, West Malling, ME19 4SP. We are the data controller for the information described here. You can contact us at [email protected] or on 07748 218647.

What we collect

• Contact details — your name, phone number and email address, so we can arrange and confirm appointments.
• Health information — your medical history, medication, allergies and relevant conditions. This is special category data under UK data protection law and is treated accordingly.
• Treatment records — what was discussed, what was recommended, what was administered, and your consent.
• Clinical photographs, where you have consented to them being taken. Consent for a photograph to be used in any other way is asked for separately, and you can decline or withdraw it at any time without it affecting your treatment.

Why we hold it, and on what legal basis

We process your contact details to provide the service you have asked for. We process health information for the purposes of medical diagnosis and the provision of health care and treatment — the basis in law being Article 9(2)(h) of the UK GDPR, which permits it where processing is carried out by a health professional under a duty of confidentiality.

We only send marketing where you have asked us to, and every message includes a way to stop.

Who sees it

Your records are seen by the clinicians treating you. Prescription decisions involve our prescribing doctor. We use third-party services to run the practice — for example appointment software and clinical record software — and those providers act on our instructions under contract. We do not sell your data, and we do not share it for marketing.

We may share information where the law requires it, or where there is a serious safety concern.

How long we keep it

Clinical records are kept for the period required for medical records, which is longer than we would keep ordinary business information — normally a minimum of eight years after your last treatment. This means that if you ask us to delete your records, we may not be able to erase clinical information, because we have a legal obligation to retain it. We will explain what we can and cannot do, and why.

Your rights

You can ask for a copy of the information we hold about you, ask us to correct it, ask us to restrict how we use it, object to processing, and withdraw consent where consent is what we relied on — for example for photographs or marketing. Write to [email protected] and we will respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.

Cookies

This website does not use tracking or advertising cookies, and it does not run analytics that profile you. If that changes, this page changes first and you will be asked before any non-essential cookie is set.

Security

Records are held on access-controlled systems. Access is limited to the clinicians who need it. If a breach occurs that is likely to result in a risk to your rights, we will tell you and report it as required.