Privacy Policy

Last updated: 10 November 2026

This policy explains how Anna Vergun Aesthetic Clinic (“the clinic”, “we”, “us”) looks after your personal information, in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

Anna Vergun, a sole trader, trading as Anna Vergun Aesthetic Clinic, is the data controller for the information described here.

2nd Floor, 16 Royal Crescent, Cheltenham, GL50 3DA
Email: [email protected]

What information we collect

• Contact details: your name, email address, telephone number and date of birth when you book, enquire or fill in a form.
• Booking information: the treatments you book, appointment times and any messages you send us.
• Health and treatment records: your medical history, medications, allergies, consent forms, consultation notes, treatment details and aftercare. This is “special category” data and is needed so we can treat you safely.
• Photographs: before-and-after or clinical photographs, only with your separate, explicit consent.
• Payment information: a record that payment was made. We do not store full card numbers.

Why we use it, and our legal basis

• To book, deliver and look after your treatment (performance of a contract with you).
• To assess whether a treatment is safe for you and to keep proper clinical records (your explicit consent for health information, and our professional and insurance obligations).
• To send appointment confirmations and reminders (performance of a contract).
• To keep financial and tax records (legal obligation).
• To handle complaints, claims or insurance queries (legitimate interests and legal obligation).

We do not sell your information, and we only send marketing messages if you have asked us to. You can opt out at any time.

Who we share it with

• Fresha, the online booking and client-management system we use to take bookings, store client records and send reminders. Fresha acts under its own privacy policy.
• Cloudflare, which hosts this website and forwards our email.
• Our insurers, professional bodies, legal advisers or regulators, where we are required to or need to for a claim or complaint.
• Doctors or emergency services, if there is a medical emergency during or after treatment.

Some of these providers may process information outside the UK. Where they do, appropriate safeguards are required by law.

How long we keep it

We keep treatment and consent records for as long as is needed for your care and for insurance and legal purposes, typically eight years after your last treatment. Other information, such as enquiries that did not lead to a booking, is kept for a shorter period and then deleted.

Your rights

You have the right to access the information we hold about you, to have inaccurate information corrected, to ask for it to be erased (where we are not legally required to keep it), to restrict or object to certain uses, and to withdraw consent at any time. To use any of these rights, email [email protected].

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. We would welcome the chance to put things right first.

This website

This website does not use tracking or advertising cookies. The “How to find us” map is provided by Google and only loads if you choose to show it. See our Cookie Policy. The consultation form used in the clinic keeps entered details on the device being used and does not send them anywhere.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.