Privacy Policy
Last updated: June 2025
1. Who We Are
Cura Wellness & Aesthetics ("we", "us", "our") is a nurse-led private clinic. We are the data controller for personal information we collect. Our registered address is Upper Aston Farm, Aston Ln, Upper Aston, Claverley, Wolverhampton WV5 7EE. Contact: info@curawellnessandaesthetics.co.uk.
2. What Information We Collect
We collect information you provide directly: name, email address, telephone number, date of birth, health and medical history (necessary for clinical consultations and treatment), and payment information (processed securely — we do not store card details). We also collect technical data including IP address, browser type, and cookies (see Cookie Policy).
3. How We Use Your Information
We use your personal data to: provide and manage clinical consultations and treatments; communicate with you about appointments and follow-up care; comply with legal and regulatory obligations (including NMC standards); send you relevant health and wellness information where you have consented; and improve our website and services.
4. Legal Basis for Processing
We process your personal data on the following legal bases: performance of a contract (providing treatments you book); legitimate interests (managing our business, improving services); legal obligation (regulatory compliance, NMC record-keeping); and consent (marketing communications — withdrawable at any time).
5. Health Data
Health and medical information is special category data under GDPR. We process this data solely for the purpose of providing clinical care and on the basis of explicit consent given at the time of your consultation. Health records are retained in accordance with NMC guidance (minimum 8 years).
6. Data Retention
We retain personal data for as long as necessary to provide our services and comply with legal obligations. Clinical records are retained for a minimum of 8 years in accordance with NMC guidance. Marketing data is retained until you withdraw consent.
7. Your Rights
You have the right to: access your personal data; correct inaccurate data; request deletion (subject to legal requirements); restrict processing; data portability; and object to processing for direct marketing. To exercise any right, contact us at info@curawellnessandaesthetics.co.uk. If you believe your rights have been violated, you may complain to the ICO: ico.org.uk.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Clinical records are stored securely in compliance with NHS Digital standards for private practices.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.