Privacy Policy
1 Who looks after your information
NARA SIMONE LIMITED, trading as Nara Simone Medispa, is responsible for the personal information covered by this policy. Company number: 10318025. Registered office: 2 Churchfield Road, London, W3 6EG. We operate the Acton and New Alresford clinics.
This policy covers website visitors, enquiries, bookings, voucher purchasers and recipients, and clinic clients. For privacy questions or requests, email alyona.narasimone@gmail.com or write to our registered office. You can also call Acton on 020 8896 0034 or New Alresford on 01962 582726.
2 What information we use
We use your name and contact details, enquiries, appointments, purchases and payment records. A voucher purchaser may also give us a recipient’s delivery details.
For treatment, we collect relevant health information, medicines, allergies, consultation and treatment notes, consent records and photographs taken with permission. This happens through Phorest or in the clinic. Website tools also involve device and browsing information; see our Cookie Policy.
3 Why we use it
We use booking and purchase information to arrange and provide the services you request. This is needed for your contract with us, or to take steps you ask for before booking. Some records are needed to meet legal duties, such as accounting requirements.
Where necessary and fair, we may rely on legitimate business interests, such as delivering a gift for its purchaser, keeping systems secure or handling a dispute. This means balancing that need against your privacy rights.
Health information helps us assess suitability, provide safe treatment and keep appropriate records. It has extra legal protection and needs a separate legal ground for use. Without the information needed for a safe assessment, treatment may not be possible.
Permission for marketing or public use of photographs is separate from treatment. Booking or accepting this policy does not give that permission. Any marketing messages must follow the rules for consent or an applicable existing-customer exception, with a clear way to opt out.
4 Photographs and marketing choices
Permission to take and keep a clinical photograph is different from permission to publish it. Publicity permission must explain the images and uses you agree to. Refusing publicity does not affect your care.
You may withdraw consent for future use by contacting us. This does not undo earlier lawful use. We must address copies we control as the law requires, but cannot promise to recover every copy already shared or printed. Clinical records may still need to be kept for another valid reason.
5 Service providers and keeping information
We use Phorest for bookings and client records, and Wix for the website. Their roles and privacy information depend on the service they provide. Our responsibility for clinic records remains with us. Relevant provider information is at https://www.phorest.com/gb/privacy/ and https://www.wix.com/about/privacy.
Information may need to be disclosed where the law requires it. Any sharing must have a valid reason and be limited to what is needed. Where information is handled outside the UK, the required legal protections must be in place. Contact us for details.
We keep information only for as long as needed for its purpose, taking account of clinical, legal, accounting and justified complaint or claim requirements. Different records need different periods. A request to delete information does not always require deletion of a necessary clinical or legal record.
We must protect information appropriately, particularly health records and photographs. No online system can be guaranteed completely risk free.
6 Your choices and rights
You can ask for a copy of your information, corrections, deletion or limits on its use. In some cases you can ask for information you provided to be transferred in a usable electronic format. These rights have legal limits.
You can object to use based on legitimate interests. You can always stop direct marketing and any related profiling. Where we rely on consent, you can withdraw it without affecting earlier lawful use.
Contact us verbally or in writing. Requests are usually free and answered without unnecessary delay, normally within one month. We may need reasonable proof of identity. The law allows extra time for complex or multiple requests, and a pause for necessary clarification of an access request. We will explain any extension, lawful fee or refusal.
7 Privacy complaints
You can complain to us using the contact details in section 1. We acknowledge privacy complaints within 30 days, investigate without unnecessary delay, keep you informed and explain the outcome.
You can also complain to the UK privacy regulator, the ICO, at https://ico.org.uk/make-a-complaint/.You do not have to finish our complaints process first.
8 Children and policy changes
Treatments are for adults aged 18 and over. If we receive a child’s details in an enquiry or from someone else, we must handle them lawfully and keep them only where needed.
We may update this policy when our practices or the law change. An update does not create consent for a new use of existing information.