Last updated: 11 September 2025

1) Who we are

Lemoge Clinic (“Lemoge”, “we”, “us”, “our”) provides beauty, aesthetics and laser treatments in the UK. We are the data controller for the personal data described here.

Email: info@lemoge.co.uk
Postal: Lemoge Clinic, London, UK (see our website for addresses)
Website: www.lemoge.co.uk

We comply with UK GDPR and the Data Protection Act 2018. We never sell your personal data.

2) What data we collect

• Identity & contact (name, DOB, address, email, phone)
• Booking & treatment details (appointment history, consent forms, notes, photos with consent)
• Health info (skin conditions, allergies, medications, pregnancy status)
• Payment data (amounts, method, last 4 digits — card processing via Stripe)
• Technical info (IP address, browser, device, pages viewed, cookies)
• Communications & preferences (emails, enquiries, marketing opt-ins)

Note: Services are not directed to children under 16 without parental consent.

3) How we collect data

• Bookings online, by phone or in clinic
• Third-party booking platforms (e.g. Fresha) send us your booking details
• Payments processed securely by Stripe
• Website forms, emails and social media messages
• Cookies and analytics when you use our website
• Referrals and gift vouchers purchased on your behalf

4) Why we use your data

• To provide treatments and manage bookings (contract)
• To assess safety and maintain clinical records (consent / legitimate interests)
• To communicate with you about your treatments (contract / legitimate interests)
• To take payments and meet accounting rules (contract / legal obligation)
• To send marketing if you opt in (consent)
• To improve services and website (legitimate interests)
• To comply with laws, insurance and protect against fraud (legal obligation / vital interests)

5) Sharing your data

We share only with trusted partners, never for advertising:

• Fresha (bookings)
• Stripe (payments)
• Hosting, email, SMS, analytics (e.g. Google Analytics)
• Professional advisers (accountants, lawyers, insurers)
• Regulators, law enforcement or courts when required
• New owners in case of merger/sale, with protections in place

6) International transfers

If data is stored or accessed outside the UK/EEA, we use safeguards such as Standard Contractual Clauses or the UK transfer addendum.

7) Retention

• Treatment/health records: up to 6–7 years after last visit
• Marketing contacts: until you unsubscribe
• Financial records: 6 years (tax/accounting)
• Website logs: short-term; analytics may be aggregated
• CCTV (if used): usually ~30 days

8) Your rights

You can:

• Access, correct or erase your data
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability

We respond within one month. You can also complain to the ICO (ico.org.uk). We encourage you to contact us first.

9) Security

• SSL encryption on our website
• Restricted staff access and confidentiality agreements
• Secure systems, backups, malware protection
• No card details stored by Lemoge — handled by Stripe

10) Cookies

We use cookies to:

• Make our site work
• Remember preferences
• Analyse website use

Non-essential cookies run only if you consent via our banner. You can change preferences anytime or block cookies in your browser.

11) Marketing

We send offers/news only if you opted in (or if you’re an existing client where permitted). You can unsubscribe anytime.

12) Changes

We may update this policy. The latest version will always appear on our website with an updated date.

13) Contact us

Lemoge Clinic — Data Protection
Email: info@lemoge.co.uk
Website: www.lemoge.co.uk