Last updated: 30 September 2026.
This policy explains how Rhonas Aesthetics Ltd collects, uses and protects your personal information when you visit rhonas.com, contact us, or have a consultation or treatment with us.
Rhonas Aesthetics Ltd is the data controller for your personal information. We are a private limited company registered in England and Wales, company number 17444508.
Registered office: 121A North Road, Aurora, BH14 0FE
If you have any questions about this policy or your information, email hello@rhonas.com.
When you visit our website. Our website host automatically records standard technical information, such as your IP address, browser type and the pages you view. This is used to keep the website secure and working properly.
When you contact us. If you message us on WhatsApp or email us, we collect your name, phone number or email address, and the content of your messages.
When you complete a form on our website. Our medical history form collects your contact details, date of birth and information about your health, including medical history, medications and allergies. Our referral form collects your name and the contact details of the friend you are referring.
When you have a consultation or treatment. We keep a clinical record that includes your medical history, our suitability assessment, your consent, details of the treatment provided, clinical photographs and any aftercare or follow-up notes.
When you pay. Payments are processed by PayPal. We receive confirmation of your payment and basic transaction details. We never see or store your full card details.
Information about your health is special category data under UK data protection law, and we treat it with particular care. We only use it to assess whether treatment is suitable for you, to prescribe and provide your treatment safely, and to keep accurate clinical records.
We process your health information because it is necessary for the provision of health care by a health professional who is bound by a duty of confidentiality.
Before and after photographs are taken as part of your clinical record and stored securely in your patient file. They are never used for marketing, on social media or on our website.
If you choose to give us a review or a photograph to publish, we will only use it with your written consent. You can withdraw that consent at any time and we will remove it.
Responding to your enquiries. We do this to take steps at your request before providing a service, and because we have a legitimate interest in responding to you.
Your consultation, prescription and treatment. We do this to provide the service you have asked for. Your health information is processed for the provision of health care.
Sending your prescription to our supplying pharmacy. We do this to provide the service you have asked for, and for the provision of health care.
Keeping clinical records. We do this to meet our legal and professional obligations, and for the provision of health care.
Taking payment and keeping financial records. We do this to provide the service you have asked for, and to meet our legal obligations.
Running our referral scheme. We do this because we have a legitimate interest in operating the scheme.
Publishing reviews or photographs you provide. We only do this with your consent.
Keeping our website secure. We do this because we have a legitimate interest in protecting our website.
We do not send marketing emails or text messages. We do not sell your information, and we do not use it for automated decision making.
If a friend has referred you, we received your details through our referral form. Your friend confirmed they had your permission to share them. We may contact you to let you know about the referral and your £50 credit. We will not add you to any marketing list.
If you do not book, we delete your details 6 months after the referral was submitted. You can ask us to delete them sooner at any time.
Our supplying pharmacy. When a prescription is issued, the pharmacy receives your name, date of birth, address and prescription details so that your medicine can be dispensed.
Service providers who help us run the business:
Our insurers and professional advisers, where this is necessary, for example to manage a claim.
Other organisations, where we are required to by law.
We do not routinely share your information with your GP. We would only do so with your agreement, or in an emergency where it is needed to protect your health.
Some of our service providers store or process information outside the UK, including in the United States. Where this happens, your information is protected by UK adequacy regulations or by approved safeguards, such as the UK International Data Transfer Agreement.
Clinical records, including medical history, consent, treatment records and clinical photographs, are kept for 8 years from your last appointment.
Payment and financial records are kept for 6 years, as required by HMRC.
Enquiries and forms where no consultation takes place are kept for 12 months from your last contact with us.
Details of referred friends who do not book are kept for 6 months from the date of the referral.
You have the right to:
You can ask us to delete your records at any time. We will consider every request, but we may need to keep clinical records where this is necessary for legal, regulatory or insurance purposes. If this applies, we will explain why.
To make a request, email hello@rhonas.com. There is no charge, and we will respond within one month.
Client records are stored digitally in secure Google Workspace accounts. Access is restricted to authorised members of our team, and we do not keep paper records.
Our website does not use cookies for analytics, advertising or tracking.
We use Google Search Console to understand how our website appears in Google search results. Search Console uses information from Google's own search results and does not place cookies on your device when you visit our website.
Our website host may use strictly necessary cookies that allow the website to work securely. These do not require your consent. If we add any other cookies in future, we will update this policy and ask for your consent first.
We do not treat anyone under the age of 18, and we do not knowingly collect information about children.
If you are unhappy with how we have handled your information, please email hello@rhonas.com and we will do our best to resolve it.
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.