Last updated: 5 November 2026
This policy explains what information Aesthetics Medispa collects about you, why we collect it, who sees it and what you can do about it. If anything is unclear, please ask us.
Who we are
Aesthetics Medispa is the trading name of i-Aesthetics Ltd, a company registered in England and Wales (company number 12436336). Our registered office is G.P.G. House, Walker Avenue, Wolverton Mill, Milton Keynes MK12 5TW, and our clinic is at 172 Bushey Mill Lane, Watford WD24 7PB. Our practitioner is Colin Solomon.
i-Aesthetics Ltd is the controller of your personal information. This means we decide how it is used and are responsible for looking after it. You can contact us about anything in this policy:
- Email: createyourwellness@gmail.com
- Phone: 07533 007033
When you contact us or send an enquiry
Our contact form and booking enquiry form ask for your name, email address, phone number, the treatment you're interested in and a message. When you send a form, it emails your details to us. The website itself doesn't keep a copy. If you email or call us instead, we use your details in the same way.
We use these details to reply to you and, if you want, to arrange a consultation. Your message may include information about your health. Please share only what you're comfortable with: we go through your medical history properly at your consultation. Anything you tell us about your health is kept confidential and used only to answer you and plan your care.
We don't have a newsletter.
Bookings, gift vouchers and consultation calls
We take bookings and sell gift vouchers through Fresha, and you can book a consultation call through Calendly. When you use them, you give your details to Fresha or Calendly, and their own privacy policies apply. They pass us what we need to see you, such as your name, contact details, appointment time and anything you add to your booking.
At the clinic
Before any treatment, we hold a consultation and take your medical history. This covers your medical conditions, medicines, allergies, pregnancy, previous treatments and anything else that affects whether a treatment is safe for you. We then keep notes of each treatment, your consent, any patch test results and the aftercare advice we give you. Some of our treatments, such as vaginal rejuvenation and erectile dysfunction treatment, involve intimate or sexual health information, and we treat this with particular care.
If we take photos to record your treatment, they form part of your medical record. We never use them on our website or social media without your separate written consent.
You don't have to tell us anything, but we can't treat you safely without a full medical history. We also keep a record of what you've paid, for our accounts.
We only treat adults aged 18 or over, so we don't knowingly collect information about children.
Our legal reasons for using your information
Data protection law only lets us use your information when we have a lawful reason. Ours are:
- To provide your treatment: your contact details, bookings and records are needed to carry out the treatment you've asked for.
- Legitimate interests: answering your enquiries, improving our website, running the clinic, and keeping records in case of a complaint or claim.
- Legal obligation: keeping company accounts, which the law requires.
Health information, including information about your sex life, is a special category of information under the law. We use it to provide health care to you, under a duty of confidentiality, which the law allows. In rare cases we may also need it to deal with a legal claim.
Who we share it with
We never sell your information or share it for anyone else's marketing. We share it only with:
- Google, because our email is a Gmail account. Emails you send us, and our replies, are stored by Google.
- The people who build and look after our website, and our hosting provider. They can see website data only to run the site for us.
- PostHog, our website analytics service (see "Cookies and analytics" below).
- A prescriber, if a treatment you choose needs a prescription. Some of our treatments, such as vitamin injections and IV drips, use prescription-only medicines, so a doctor, nurse or pharmacist prescriber assesses you first and sees the health information they need to do that.
- Your GP or another health professional, only if you agree, unless there is a serious risk to your health or someone else's, or the law requires it.
- Others where necessary: our insurer or legal advisers if there is a claim, and the police, a court or a regulator where the law requires it.
Where your information is stored
Our website runs on a hosting provider's servers in Finland, and PostHog stores analytics data on servers in the EU. UK law recognises EU data protection as adequate, so your information has the same protection there as in the UK. Google may store emails outside the UK, including in the United States, and uses safeguards recognised under UK law when it does.
How long we keep it
- Medical records: eight years after your last treatment, in line with NHS guidance for adult health records.
- Enquiries: up to 12 months after we last hear from you. If you become a client, your enquiry is kept with your medical record.
- Payment and accounts records: six years, as tax law requires.
After that, we delete or securely destroy it. We keep your information confidential and take sensible steps to keep it secure. Your medical records are seen only by people who need them for your care.
Cookies and analytics
Our website doesn't set any cookies of its own for visitors. WordPress, the system our website runs on, sets cookies only when our own team logs in to manage the site. Our fonts are loaded from our own website, not from Google or any other font service. Fresha and Calendly set their own cookies when you visit their sites.
Google Maps. Our contact page shows a Google Map of the clinic. When the map loads, your browser connects to Google, which receives your IP address and may set its own cookies. Google's privacy policy applies to the map.
Analytics. We use PostHog to see how our website is used, so we can improve it. It's set up without cookies: it stores nothing on your device and doesn't remember you from one page to the next. It records which pages are visited, which website sent you to us, your browser and type of device, how quickly pages load, clicks on links and buttons, and your rough location (town or country) worked out from your IP address. PostHog doesn't keep your IP address, builds no profile of you and doesn't follow you to other websites. We only use these figures as statistics, and they don't tell us who you are.
You can turn analytics off at any time with the "Turn off analytics" button on this page. Your browser then remembers your choice, and your visits are no longer counted.
Your rights
You have the right to:
- get a copy of the information we hold about you
- have it corrected if it's wrong
- have it deleted, although we must keep medical records for the period above
- ask us to limit how we use it, or object to how we use it
- receive information you gave us in a format you can reuse
- withdraw any consent you've given, at any time
To use any of these rights, email or call us. It's free, and we'll reply within one month. We don't make decisions about you by automated means.
Complaints
If you're unhappy with how we've handled your information, please tell us first. We'll acknowledge your complaint within 30 days and look into it properly.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk or 0303 123 1113.
Changes to this policy
We'll update this policy if the way we use information changes, and change the date at the top.
Treatments that work. Results you can see.
Every treatment at Aesthetics Medispa begins with a thorough consultation, understanding your skin, your health and your goals before anything is recommended.