Privacy Policy

Who we are

Lena Mac, Lena Mac, 26 Beeches Walk, Sutton Coldfield, Birmingham, B73 6HN, is the data controller for the personal information described in this notice. You can contact us at hello@lenamac.com or on 07925 232246.

What we collect

• Contact details: name, email address, phone number
• Enquiry details: the treatment you are interested in and your message
• Health information taken at consultation: medical history, medication, allergies, treatment records, consent forms and clinical photographs
• Appointment, deposit and payment records
• Website usage data from cookies, where you have consented

Why we use it and our lawful basis

• To respond to your enquiry and arrange appointments - legitimate interests and steps taken at your request before entering a contract
• To provide treatment safely and keep clinical records - contract, and for health data, Article 9(2)(h) UK GDPR (health care provided by a professional under a duty of confidentiality)
• To meet insurance, safety and legal record-keeping obligations - legal obligation
• To send marketing or offers - only where you have given consent, which you can withdraw at any time

Who we share it with

We do not sell your data. We share it only where necessary with our IT, email and booking providers acting on our instructions, our insurer or legal advisers where a claim arises, and healthcare professionals where your safety requires it or you ask us to.

How long we keep it

Clinical records and consent forms are retained for 8 years after your last treatment, in line with professional and insurance guidance. General enquiries that do not lead to treatment are deleted within 12 months. Clinical photographs are kept for the same period as your clinical record and are only used publicly with separate written consent, which you may withdraw.

Your rights

Under UK GDPR you have the right to access your data, to have inaccurate data corrected, to request erasure or restriction, to object to certain processing, to data portability, and to withdraw consent where consent is our basis. To exercise any of these, email hello@lenamac.com.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Security

Paper records are stored in locked storage at the clinic, and electronic records are held on password-protected, access-controlled systems.