The Practitioner

Privacy notice

Last updated 4 November 2026.

I'm Anna, and I run The Practitioner myself. When you trust me with your skin, you also trust me with personal and sometimes medical information. This notice explains, in plain English, what I collect, why I need it, who else sees it, how long I keep it and the rights you have.

Who I am

The Practitioner is my own clinic at 7 Freer Street, Attleborough, Nuneaton, CV11 4PR. For data protection law I'm the controller of your information, which means I decide how it's used and I'm responsible for keeping it safe.

If you have any question about your information, message me on WhatsApp on 07338 350512. You'll always be speaking to me.

This website

You can use this website without giving me any personal information. It doesn't use cookies, analytics or advertising trackers, and the fonts and images are stored on the site itself rather than loaded from other companies.

Like every website, the company that hosts it keeps short-lived technical logs, such as IP addresses, to keep the site secure and working. I don't use those logs to identify anyone.

Buttons on this site open WhatsApp, Instagram, Facebook, Google Maps, my booking system or a payment provider. Once you leave this site, that company's own privacy policy applies.

What I collect and why

Depending on how you use my services, I may hold:

  • Contact details, such as your name, phone number and email, so I can reply to you, arrange appointments and send reminders.
  • Your consultation answers, including medical history, medication, allergies, skin type and recent sun exposure, so I can decide whether a treatment is safe and suitable for you.
  • Treatment records, including the treatment, settings used, patch test results, consent forms and aftercare given, so I can treat you safely over a course and meet my insurance and professional duties.
  • Photographs of the treatment area, taken with your consent, to track your progress.
  • Payment records, such as what you've paid and how, for my accounts and tax.
  • Messages you send me on WhatsApp, Instagram, Facebook or by phone.

My legal reasons for using it

Data protection law only lets me use your information when I have a lawful reason. Mine are:

  • To provide the treatment you've asked for, and to take the steps you ask for before booking, such as answering questions and giving you a price.
  • Your explicit consent for health information and treatment photographs, which you give on your consultation form. Health information has extra protection under the law and I treat it that way.
  • Legal obligations, such as keeping financial records for HMRC.
  • My legitimate interests in running a safe, well-organised clinic, and in keeping records I may need if there were ever a complaint or claim.

Photographs

I only take photographs with your consent, and they're used for your treatment records unless you agree otherwise.

I'll never use a photo of you on this website, on social media or anywhere else without your separate written permission. You can withdraw that permission at any time by messaging me, and I'll stop using the photo in anything new and remove it from my own pages.

Who else sees your information

I never sell your information or share it for anyone else's marketing. It's only seen by:

  • My booking and consent system, which stores your consultation forms and appointments securely on my behalf.
  • WhatsApp, Instagram and Facebook, when you choose to message me there.
  • Payment providers, including my card machine provider, Klarna and Clearpay, when you pay through them. Klarna and Clearpay make their own lending decisions under their own terms.
  • My accountant, for my business accounts.
  • My insurer, legal advisers or the authorities, only if it's needed for a claim, a complaint or because the law requires it.
  • A parent or guardian, where the client is under 18.

Some of these companies store information outside the UK. Where they do, they use the legal safeguards UK law requires.

Under-18s

I can treat clients under 18 with written consent from a parent or guardian. In that case I hold the parent or guardian's contact details and consent alongside the client's records.

How long I keep it

I keep information only as long as I need it:

  • Consultation forms, consent forms, treatment records and treatment photographs: 8 years after your last treatment, or until your 25th birthday if you were treated under 18, whichever is later. This follows guidance for clinical records and lets me answer any question about your treatment later on.
  • Payment and financial records: 6 years, as tax law requires.
  • Enquiries that don't lead to a booking: up to 12 months.
  • Marketing permissions: until you withdraw them.

After that, I delete or securely destroy it.

Keeping it safe

Your records are kept in my secure booking system and on password-protected devices that only I use. Any paper records are kept locked away. If something ever went wrong that put your information at risk, I'd tell you and, where the law requires it, the Information Commissioner's Office.

Offers and news

I'll only send you offers or news if you've said you'd like them. You can say stop at any time by replying to any message, and I'll remove you straight away.

Your rights

You have the right to:

  • ask for a copy of the information I hold about you
  • ask me to correct anything that's wrong or incomplete
  • ask me to delete your information, unless I have to keep it, for example for tax or insurance
  • ask me to limit how I use it, or object to how I use it
  • withdraw your consent at any time, without affecting anything I've already done with it
  • ask for your information in a format you can take elsewhere

Just message me on 07338 350512. It's free, and I'll reply within one month. I may need to check it's really you before I share anything.

Complaints

If you're unhappy with how I've handled your information, please tell me first and I'll do my best to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this notice

If I change how I use your information, I'll update this page and the date at the top.