Privacy Policy
Last updated: 30 August 2026
Aphrodite Clinic Ltd, trading as Dr Reem Clinic (“Dr Reem Clinic”, “we”, “us” or “our”), is committed to protecting your privacy and the security of your personal information.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, book an appointment, purchase products or receive medical or aesthetic treatments from us.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended from time to time.
Please read this Privacy Policy carefully so that you understand how and why we use your personal information.
Data Controller
For the purposes of applicable data protection legislation, Aphrodite Clinic Ltd, trading as Dr Reem Clinic, is the data controller responsible for your personal information.
If you have any questions about this Privacy Policy, how we use your information, or wish to exercise your data protection rights, please contact us:
Aphrodite Clinic Ltd
Trading as Dr Reem Clinic
Email: info@drreemclinic.co.uk
Information We Collect
We may collect different types of personal information depending on how you interact with us.
a. Personal and Contact Information
This may include:
Full name
Date of birth
Address
Telephone number
Email address
Appointment and booking information
Emergency contact information where relevant
Information provided when you contact us or make an enquiry
b. Health and Medical Information
When you enquire about or receive treatment from us, we may collect information necessary to assess your suitability for treatment and provide safe and appropriate care.
This may include:
Medical history
Relevant medical conditions
Allergies
Current and previous medication
Previous aesthetic or medical treatments
Treatment history
Consultation notes
Clinical assessments
Treatment plans
Aftercare information
Information about your response to treatment
Other health information that you provide to us or that is necessary for your care
Health information is special category personal data under the UK GDPR and is subject to additional safeguards.
c. Clinical Photographs
Where appropriate, we may take photographs as part of your consultation, treatment or clinical records.
Clinical photographs may be used for:
Treatment planning
Clinical assessment
Monitoring treatment outcomes
Maintaining accurate clinical records
Follow-up and aftercare
Patient safety
Professional or legal purposes where necessary
We will only use clinical photographs for marketing, advertising, social media or other promotional purposes where you have provided the appropriate consent.
You are not required to consent to the use of your photographs for marketing purposes in order to receive treatment.
d. Payment and Transaction Information
We may collect information necessary to process payments and maintain appropriate financial records.
Where payments are processed by a third-party payment provider, your payment information may be processed directly by that provider in accordance with its own privacy policy.
e. Website and Technical Information
When you visit our website, we may collect technical information including:
IP address
Browser type and version
Device type
Operating system
Pages visited
Date and time of visits
Referring website
Information about how you use our website
Some of this information may be collected through cookies or similar technologies.
f. Communication Records
We may retain records of communications with you, including:
Emails
Telephone communications
Appointment information
Messages relating to your treatment
Enquiries
Feedback
Aftercare communications
Other correspondence relating to your care or relationship with us
How We Use Your Information
We may use your personal information for the following purposes.
a. Providing Medical and Aesthetic Care
We use relevant personal and health information to:
Assess your suitability for treatment
Carry out consultations
Develop appropriate treatment plans
Provide treatments safely
Maintain appropriate clinical records
Monitor treatment outcomes
Provide aftercare
Respond to treatment-related concerns
Arrange appropriate follow-up
b. Appointment Management
We may use your information to:
Arrange appointments
Confirm appointments
Send appointment reminders
Contact you regarding changes to appointments
Manage cancellations and rescheduling
Respond to enquiries
c. Service Communications
We may contact you by email, telephone, SMS, WhatsApp or another appropriate communication method regarding:
Appointments
Appointment reminders
Treatment preparation
Aftercare
Follow-up
Responses to enquiries
Information necessary for your care
These communications are service-related and are separate from marketing communications.
d. Payments and Purchases
We may use your information to:
Process payments
Process purchases
Provide products or treatments you have purchased
Deal with refunds or payment queries
Maintain financial and accounting records
e. Legal and Regulatory Requirements
We may process your information where necessary to:
Comply with legal obligations
Meet professional and regulatory requirements
Maintain appropriate clinical records
Respond to lawful requests from authorities
Establish, exercise or defend legal claims
Protect the rights, safety and security of patients, staff and others
f. Improving Our Services
We may use appropriate information to review and improve our services, patient experience, website and administrative processes.
Lawful Basis for Processing
We must have a lawful basis for collecting and using your personal information.
Depending on the circumstances, we may rely on:
Contract
Where processing is necessary to provide treatments, products or services you have requested or to take steps at your request before entering into an agreement.
Legal Obligation
Where we are required to process information to comply with a legal, regulatory or professional obligation.
Legitimate Interests
Where processing is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms.
Examples may include managing our business, maintaining appropriate records, improving our services, preventing fraud and protecting our clinic and patients.
Consent
Where you have given consent for a specific use of your information.
This may include certain marketing communications or the use of clinical photographs for promotional purposes.
Where we rely on consent, you may withdraw that consent at any time.
Special Category Data
Health information is special category data and requires an additional lawful condition under Article 9 of the UK GDPR.
We will only process health information where we have both an appropriate Article 6 lawful basis and an applicable Article 9 condition.
SMS, WhatsApp and Other Communications
We may use your telephone number to communicate with you by SMS, WhatsApp, telephone or other messaging services where appropriate.
Service and Treatment Communications
We may use these methods to send:
Appointment confirmations
Appointment reminders
Treatment preparation instructions
Aftercare information
Follow-up communications
Responses to enquiries
Other information necessary for your treatment or care
Marketing Communications
Where required by law, we will only send marketing communications by electronic means where you have provided the appropriate consent or where a lawful exception applies.
You can opt out of marketing communications at any time by contacting:
Opting out of marketing will not prevent us from sending essential communications relating to your appointments or treatment.
Where third-party messaging providers are used, they may process your information on our behalf and will be subject to appropriate contractual and data protection safeguards.
Marketing
We may provide information about our treatments, services, products, clinic updates or offers where we are legally permitted to do so.
Where consent is required, we will obtain your consent before sending marketing communications.
You can withdraw your consent or unsubscribe from marketing communications at any time.
Marketing consent is separate from any consent required for medical or aesthetic treatment.
Sharing Your Information
We do not sell your personal information.
We may share relevant information where necessary, lawful and appropriate.
This may include:
People involved in your care
Where appropriate and lawful, information may be shared with healthcare professionals or other providers involved in your care.
Service Providers
We may use trusted third-party providers to support our business, such as:
Appointment and booking systems
Payment providers
IT and website providers
Email and communication providers
Data storage and hosting providers
Professional advisers
These providers may process personal information on our behalf and are required to handle it appropriately.
Professional Advisers and Insurers
We may share relevant information with professional advisers, insurers or other organisations where this is necessary for legal, professional, insurance or regulatory purposes.
Legal and Regulatory Authorities
We may disclose information where required or permitted by law, including to:
Courts and tribunals
Law enforcement authorities
Regulatory bodies
Government authorities
Other competent authorities
We will only disclose information that is necessary and lawful in the circumstances.
Data Security
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, alteration or disclosure.
These measures may include:
Access controls
Password protection
Secure systems
Encryption where appropriate
Restricted access on a need-to-know basis
Secure storage
Regular backups where appropriate
Staff confidentiality obligations
Appropriate physical security measures
No electronic system or method of transmission can be guaranteed to be completely secure.
If you believe your personal information has been lost, accessed without authorisation or otherwise misused, please contact us immediately at:
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet our legal, regulatory, professional, accounting and reporting obligations.
Clinical and treatment records may need to be retained for longer periods than general enquiries or website information.
The length of time information is retained depends on factors including:
The type of information
The purpose for which it was collected
Our legal and regulatory obligations
Professional requirements
Whether the information may be required in connection with a legal claim or dispute
Where we no longer need personal information, we will securely delete, destroy or anonymise it where appropriate.
Cookies and Website Analytics
Our website may use cookies and similar technologies.
Cookies are small text files placed on your device when you visit a website.
We may use the following categories of cookies:
Strictly Necessary Cookies
These cookies are required for the website to function properly and may include cookies necessary for security, website functionality and remembering cookie preferences.
Analytics Cookies
These cookies may help us understand how visitors use our website, such as which pages are visited and how the website performs.
Where consent is required, analytics cookies will only be placed after you have provided appropriate consent.
Functionality Cookies
These cookies may remember preferences and improve your experience of the website.
Marketing and Advertising Cookies
Where applicable, these technologies may be used to understand website interactions or measure advertising activity.
Where consent is required, these technologies will only be used after appropriate consent has been obtained.
You can manage your cookie preferences through the cookie consent mechanism on our website and through your browser settings.
The ICO states that non-essential cookies generally require consent before being placed on a user’s device.
International Transfers
Some of the third-party service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with applicable UK data protection law.
This may include relying on an adequacy decision or appropriate contractual or other lawful safeguards.
Your Data Protection Rights
Depending on the circumstances, you may have the following rights under UK data protection law:
Right of Access
You may request a copy of the personal information we hold about you.
Right to Rectification
You may ask us to correct inaccurate or incomplete information.
Right to Erasure
You may ask us to delete your personal information in certain circumstances.
This right is not absolute and may not apply where we have a lawful reason to retain information.
Right to Restriction
You may ask us to restrict how we process your information in certain circumstances.
Right to Object
You may object to certain types of processing, including direct marketing and, in certain circumstances, processing based on legitimate interests.
Right to Data Portability
In certain circumstances, you may request that personal information you have provided to us is provided to you or transferred to another organisation in a structured, commonly used and machine-readable format.
Right to Withdraw Consent
Where we rely on consent, you may withdraw your consent at any time.
Your rights depend on the circumstances and the lawful basis on which we process your information. Not every right will apply in every situation.
To exercise your rights, please contact:
We may need to verify your identity before processing your request.
The ICO confirms that privacy information should explain the applicable rights and the circumstances in which they apply.
Complaints
If you have concerns about how we have handled your personal information, please contact us first:
Email: info@drreemclinic.co.uk
We will endeavour to investigate and respond to your concerns appropriately.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
The ICO recommends that privacy notices inform individuals of their right to complain to the regulator.
Third-Party Websites
Our website may contain links to third-party websites, social media platforms or other online services.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policy of any third-party website you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
Our services
How we process personal information
Technology
Legal or regulatory requirements
Data protection practices
The latest version will always be published on our website.
Where appropriate, we will notify you of significant changes.
Last updated: 30 August 2026
Contact Us
If you have any questions about this Privacy Policy, how we process your personal information, or wish to exercise your data protection rights, please contact:
Aphrodite Clinic Ltd
Trading as Dr Reem Clinic
Email: info@drreemclinic.co.uk
Website: drreemclinic.co.uk