Privacy Policy

Last updated: 15 October 2026

Dr Kate BB Aesthetics respects your privacy. This policy explains what personal information we collect, why we collect it, how we look after it and what your rights are. It applies to this website (www.drkatebb.com), to enquiries and bookings, and to care you receive at the clinic.

Who we are

The data controller is Dr Kate Bennett-Brown, trading as Dr Kate BB Aesthetics, at The Cosmetic Dental Gallery, 20 Patcham Terrace, Nine Elms, London SW8 4EY. You can contact us at contact@drkatebb.com or on +44 7774 759867 (phone or WhatsApp).

What information we collect

  • Enquiries. Your name, email address, phone number and the contents of your message when you contact us by email, phone, WhatsApp or a website form.

  • Bookings and your care. When you book a consultation or treatment, usually through Glowday, we receive your name, contact details and date of birth, and the information you give us for your care, including medical history, medications, allergies, consent forms, treatment records, aftercare notes and payment records. This includes health information, which is special category data.

  • Clinical photographs. We may take photographs of your face or skin for your clinical record. We only use photographs for marketing, social media or our website if you give separate, written consent.

  • Newsletter and marketing. Your name and email address if you subscribe to our emails.

  • Website use. Technical information such as your IP address, browser, device, the pages you visit and how you arrived on the site, collected through cookies and similar technologies (see Cookies below).

  • Reviews. If you leave us a review on Google or Glowday, we can see what you choose to publish there.

Why we use your information and our legal basis

  • To respond to your enquiries and arrange appointments, because it is necessary to take steps at your request before a contract, and to carry out that contract.

  • To assess you, provide safe treatment and keep accurate clinical records. Health information is used to provide health care, under UK GDPR Article 9(2)(h), and is treated as confidential.

  • To meet our legal and professional obligations, including record keeping.

  • To send you newsletters and promotions, only with your consent, or where the law allows us to contact existing patients about similar services and you have not opted out. You can unsubscribe at any time.

  • To use your photographs publicly, only with your explicit consent, which you can withdraw at any time.

  • To run, secure and improve our website and business, based on our legitimate interests. Where cookies need consent, we ask for it first.

Who we share it with

We do not sell your personal information. We share it only where needed, with:

  • Glowday, our online booking and client record system.

  • Squarespace, which hosts this website and sends our email campaigns.

  • Google, for website analytics (Google Analytics), our Business Profile and reviews.

  • WhatsApp (Meta), if you choose to message us there.

  • Your GP, dentist or another health professional, only with your consent, or where there is a serious safety concern.

  • Our insurer, professional bodies, regulators or the authorities, where we are required to by law or need to for a legitimate claim.

Some of these providers are based outside the UK, including in the United States. Where that happens we rely on approved safeguards, such as the UK-US data bridge or standard contractual clauses.

How long we keep it

Clinical records are kept for at least 8 years after your last treatment, in line with medical record keeping guidance. Enquiries that do not lead to a booking are kept for a limited period and then deleted. Marketing details are kept until you unsubscribe. Website analytics data is kept for the period set in our Google Analytics account.

How we protect it

We use secure, password-protected systems, limit access to those who need it, and only use providers that apply appropriate security measures. Please avoid sending sensitive health information by ordinary email or message where you can; we can give you a secure way to share it.

Cookies

This website uses essential cookies to work properly and, if you accept, analytics cookies (Google Analytics) that help us understand how the site is used. You can accept or decline non-essential cookies in the banner when you first visit, and change your choice in your browser settings at any time.

Your rights

Under UK data protection law you have the right to access your information, to have it corrected, to ask for it to be erased (unless we must keep it, for example clinical records), to restrict or object to its use, to receive a copy in a portable format, and to withdraw consent at any time. To use any of these rights, email contact@drkatebb.com. We aim to respond within one month.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.