Privacy Policy

Last updated: 30 September 2026.

This policy explains how Rhonas Aesthetics Ltd collects, uses and protects your personal information when you visit rhonas.com, contact us, or have a consultation or treatment with us.

Who we are

Rhonas Aesthetics Ltd is the data controller for your personal information. We are a private limited company registered in England and Wales, company number 17444508.

Registered office: 121A North Road, Aurora, BH14 0FE

If you have any questions about this policy or your information, email hello@rhonas.com.

Information we collect

When you visit our website. Our website host automatically records standard technical information, such as your IP address, browser type and the pages you view. This is used to keep the website secure and working properly.

When you contact us. If you message us on WhatsApp or email us, we collect your name, phone number or email address, and the content of your messages.

When you complete a form on our website. Our medical history form collects your contact details, date of birth and information about your health, including medical history, medications and allergies. Our referral form collects your name and the contact details of the friend you are referring.

When you have a consultation or treatment. We keep a clinical record that includes your medical history, our suitability assessment, your consent, details of the treatment provided, clinical photographs and any aftercare or follow-up notes.

When you pay. Payments are processed by PayPal. We receive confirmation of your payment and basic transaction details. We never see or store your full card details.

Your health information

Information about your health is special category data under UK data protection law, and we treat it with particular care. We only use it to assess whether treatment is suitable for you, to prescribe and provide your treatment safely, and to keep accurate clinical records.

We process your health information because it is necessary for the provision of health care by a health professional who is bound by a duty of confidentiality.

Clinical photographs

Before and after photographs are taken as part of your clinical record and stored securely in your patient file. They are never used for marketing, on social media or on our website.

If you choose to give us a review or a photograph to publish, we will only use it with your written consent. You can withdraw that consent at any time and we will remove it.

How we use your information

Responding to your enquiries. We do this to take steps at your request before providing a service, and because we have a legitimate interest in responding to you.

Your consultation, prescription and treatment. We do this to provide the service you have asked for. Your health information is processed for the provision of health care.

Sending your prescription to our supplying pharmacy. We do this to provide the service you have asked for, and for the provision of health care.

Keeping clinical records. We do this to meet our legal and professional obligations, and for the provision of health care.

Taking payment and keeping financial records. We do this to provide the service you have asked for, and to meet our legal obligations.

Running our referral scheme. We do this because we have a legitimate interest in operating the scheme.

Publishing reviews or photographs you provide. We only do this with your consent.

Keeping our website secure. We do this because we have a legitimate interest in protecting our website.

We do not send marketing emails or text messages. We do not sell your information, and we do not use it for automated decision making.

If you have been referred to us

If a friend has referred you, we received your details through our referral form. Your friend confirmed they had your permission to share them. We may contact you to let you know about the referral and your £50 credit. We will not add you to any marketing list.

If you do not book, we delete your details 6 months after the referral was submitted. You can ask us to delete them sooner at any time.

Who we share your information with

Our supplying pharmacy. When a prescription is issued, the pharmacy receives your name, date of birth, address and prescription details so that your medicine can be dispensed.

Service providers who help us run the business:

  • Webflow, which hosts our website
  • Formspree, which processes forms submitted on our website
  • Google Workspace, which provides our email and secure storage for client records
  • WhatsApp, which we use to message clients
  • PayPal, which processes payments, including PayPal Pay in 3

Our insurers and professional advisers, where this is necessary, for example to manage a claim.

Other organisations, where we are required to by law.

We do not routinely share your information with your GP. We would only do so with your agreement, or in an emergency where it is needed to protect your health.

International transfers

Some of our service providers store or process information outside the UK, including in the United States. Where this happens, your information is protected by UK adequacy regulations or by approved safeguards, such as the UK International Data Transfer Agreement.

How long we keep your information

Clinical records, including medical history, consent, treatment records and clinical photographs, are kept for 8 years from your last appointment.

Payment and financial records are kept for 6 years, as required by HMRC.

Enquiries and forms where no consultation takes place are kept for 12 months from your last contact with us.

Details of referred friends who do not book are kept for 6 months from the date of the referral.

Your rights

You have the right to:

  • Ask for a copy of the information we hold about you
  • Ask us to correct information that is inaccurate or incomplete
  • Ask us to delete your information
  • Ask us to restrict how we use your information
  • Object to how we use your information
  • Ask us to transfer your information to another organisation
  • Withdraw your consent at any time, where we rely on consent

You can ask us to delete your records at any time. We will consider every request, but we may need to keep clinical records where this is necessary for legal, regulatory or insurance purposes. If this applies, we will explain why.

To make a request, email hello@rhonas.com. There is no charge, and we will respond within one month.

Keeping your information secure

Client records are stored digitally in secure Google Workspace accounts. Access is restricted to authorised members of our team, and we do not keep paper records.

Cookies

Our website does not use cookies for analytics, advertising or tracking.

We use Google Search Console to understand how our website appears in Google search results. Search Console uses information from Google's own search results and does not place cookies on your device when you visit our website.

Our website host may use strictly necessary cookies that allow the website to work securely. These do not require your consent. If we add any other cookies in future, we will update this policy and ask for your consent first.

Under 18s

We do not treat anyone under the age of 18, and we do not knowingly collect information about children.

Complaints

If you are unhappy with how we have handled your information, please email hello@rhonas.com and we will do our best to resolve it.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.