Privacy Policy
Privacy Policy
Ms Perfect Ltd – Beauty and Aesthetics Treatments
Last updated: 18 October 2025
1. Introduction
Ms Perfect Ltd is committed to protecting the privacy, confidentiality and personal information of all our clients.
We provide beauty and aesthetics treatments and understand the importance of handling personal and health information with care, discretion and confidentiality.
We comply with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Ms Perfect Ltd is registered with the Information Commissioner's Office (ICO).
This Privacy Policy explains what information we collect, why we collect it, how we store and protect it, how long we retain it and the rights you have in relation to your personal information.
2. What Information We Collect
We aim to collect only the minimum amount of personal information necessary to provide our services safely, obtain appropriate treatment consent and maintain the records required for our business and insurance purposes.
Depending on the treatment you receive, the information we may collect includes:
Your name and relevant contact details.
Treatment consultation and consent forms.
Records of treatments carried out and relevant treatment dates.
Relevant health information, including medical history, allergies, skin conditions, contraindications and other information necessary to assess your suitability for treatment.
Patch test results, where applicable.
Before-and-after photographs, where appropriate and subject to the relevant consent and privacy arrangements.
Records of relevant aftercare advice, complications, complaints or follow-up care, where necessary.
We will not routinely collect information that is unnecessary for the treatment or purpose concerned.
3. How We Use Your Information
We use your personal information for legitimate treatment-related and business purposes, including:
Assessing your suitability for a beauty or aesthetics treatment.
Recording your informed consent to the treatment.
Maintaining appropriate consultation and treatment records.
Supporting your safety and providing relevant aftercare.
Recording relevant treatment outcomes, reactions or complications.
Meeting applicable insurance, legal and professional requirements.
Managing appointments, responding to your enquiries and handling complaints or claims where necessary.
We process personal information only where we have an appropriate lawful basis under applicable data protection legislation.
4. Marketing and Promotional Communications
Ms Perfect Ltd will only use your personal information for marketing purposes if you have expressly opted in to receive marketing communications.
We will not assume that you wish to receive marketing simply because you have booked a treatment, visited our premises or provided your contact details.
Where you have expressly opted in, we may use the contact details you have provided to send relevant marketing communications, such as:
Information about treatments and services we offer.
Special offers, promotions and discounts.
News about new treatments or services.
Other relevant business updates and promotional information.
Where applicable, we will obtain the required consent before sending marketing communications by email or text message or using other marketing channels that require consent.
Marketing consent is optional and is not a condition of receiving treatment from Ms Perfect Ltd.
You may withdraw your marketing consent at any time by using the unsubscribe facility in a marketing message, where available, or by contacting us directly. We will stop using your information for the relevant marketing purpose as soon as reasonably practicable.
Withdrawing marketing consent will not affect the lawfulness of any processing carried out before you withdrew your consent. It will also not prevent us from retaining or using information where this remains necessary for legitimate treatment, legal, insurance or record-keeping purposes.
We do not sell clients' personal information to third parties or provide it to other organisations for their own marketing purposes.
5. Health Information and Special Category Data
Health information is classified as special category personal data under UK GDPR and requires additional protection.
For beauty and aesthetics treatments, it may be necessary to collect limited health information to assess suitability for a treatment, identify contraindications, consider allergies and support safe treatment decisions.
We collect only the health information reasonably necessary for these purposes.
Health information is stored separately from general treatment consent and administrative records, with appropriate safeguards to protect confidentiality and restrict access.
We process health information only where an appropriate lawful basis and a valid special category condition under UK GDPR apply.
We do not use your health information for marketing purposes unless we have obtained the specific, explicit consent required by law for that particular use. General marketing consent does not automatically authorise the use of health information for marketing.
6. Treatment Consent and Data Protection
Before providing a treatment, we may ask you to complete a consultation form and sign or otherwise confirm your treatment consent.
This allows us to document your understanding of the proposed treatment, relevant risks and aftercare requirements, as appropriate to the service.
Consent to receive a treatment is separate from consent to receive marketing communications and separate from any consent required for processing personal data.
We process treatment records under the applicable legal basis for the relevant activity. Where processing health information requires a separate special category condition, we identify and apply an appropriate condition.
You may decline marketing consent without affecting your ability to receive treatments. However, if essential health or safety information is unavailable, we may be unable to proceed with a particular treatment where it would not be appropriate or safe to do so.
7. Photographs and Images
Where photographs are taken as part of a treatment, consultation or record-keeping process, we will explain the purpose for which they are required.
Photographs used for clinical or treatment documentation will be handled confidentially and stored securely, with access restricted to authorised individuals.
We will not use identifiable client photographs for promotional purposes, including our website, social media or advertising, without obtaining separate, appropriate consent.
Consent to use photographs for marketing is optional and will not be a condition of receiving treatment.
Where a photograph contains or reveals health information, additional data protection requirements may apply.
8. Our Lawful Basis for Processing
Depending on the circumstances, Ms Perfect Ltd may rely on one or more of the following lawful bases:
Contract: where processing is necessary to provide an agreed service.
Legal obligation: where we must retain or disclose information to comply with applicable law.
Legitimate interests: where processing is necessary for appropriate business administration, record-keeping or managing potential claims, provided your rights do not override those interests.
Consent: where consent is the appropriate lawful basis, including for relevant marketing activities.
For health information, we also identify and rely on an appropriate special category condition under UK GDPR.
Where we rely on consent, you will be able to withdraw it in accordance with the applicable rules. Withdrawal does not necessarily require us to delete records that we must lawfully retain for other purposes.
9. How We Store and Protect Your Information
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures include appropriate access restrictions, secure storage arrangements and safeguards designed to protect confidential treatment and health records.
Health information is kept separately from general treatment consent and administrative records, with appropriate confidentiality safeguards.
We retain access to personal information only for legitimate purposes and take reasonable steps to ensure that information is handled securely.
10. How Long We Keep Your Information
Ms Perfect Ltd retains treatment consent records for as long as required by our insurance providers. This is normally five years.
At the end of the applicable retention period, information will be securely deleted or destroyed unless a longer period is necessary because of an applicable legal obligation, an ongoing complaint, an insurance claim or another legitimate legal requirement.
Health information is subject to appropriate retention arrangements and is reviewed in accordance with applicable data protection and insurance requirements. It is securely deleted when it is no longer necessary to retain it, subject to any applicable legal or insurance requirements.
We do not retain personal information indefinitely.
11. Sharing Your Information
We treat your personal information as confidential and do not sell it or share it with other organisations for their own marketing purposes.
We may disclose relevant information where necessary and lawful to:
Our insurance providers in connection with policy requirements, incidents or claims.
Relevant professional advisers or legal representatives.
Appropriate service providers who help us operate our business, where they are authorised to process information on our behalf.
Relevant regulatory bodies, authorities or other parties where disclosure is required by law or is otherwise lawful and necessary.
We share only the information reasonably necessary for the relevant purpose and take appropriate steps to protect confidentiality.
Where third-party service providers process personal information on our behalf, we take appropriate steps to ensure that suitable data protection arrangements are in place.
12. Your Data Protection Rights
Under applicable data protection legislation, you may have the right to:
Access: request a copy of the personal information we hold about you.
Rectification: ask us to correct inaccurate or incomplete information.
Erasure: request deletion of your information where the legal conditions for erasure are met.
Restriction: ask us to restrict the processing of your information in certain circumstances.
Data portability: request certain personal information in a portable format where this right applies.
Object: object to processing based on legitimate interests in circumstances where this right applies.
Withdraw consent: withdraw consent where we rely on it as the legal basis for a particular activity, including marketing.
You have an absolute right to object to the processing of your personal information for direct marketing purposes.
These rights are subject to applicable legal conditions and exemptions. For example, we may need to retain certain treatment records to meet insurance requirements, comply with legal obligations or establish, exercise or defend legal claims.
To exercise your rights, please contact Ms Perfect Ltd using the contact details below.
13. Data Security Incidents
If a personal data breach occurs, we will assess the incident and take appropriate steps to contain it, protect affected individuals and meet any applicable reporting and notification obligations under data protection legislation.
14. Complaints
If you have concerns about how we handle your personal information, please contact us so that we can investigate your concerns.
You also have the right to raise a concern or complaint with the Information Commissioner's Office (ICO).
Website: https://ico.org.uk/
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our treatments, business practices or applicable data protection legislation.
The latest version will be made available to clients, and significant changes will be communicated where appropriate.
16. Contact Us
If you have any questions about this Privacy Policy, the personal information we hold or your data protection rights, please contact:
Ms Perfect Ltd
Email: msperfectdartford@outlook.com
Head Office Address: 110 Broadway, Bexleyheath, DA6 7DQ
ICO registration: Ms Perfect Ltd is registered with the Information Commissioner's Office.
Your privacy matters to us. We are committed to handling your personal information responsibly, protecting the confidentiality of your treatment records and respecting your choices about marketing communications.
