At JOURNEY, we are committed to protecting your personal data and respecting your privacy. This policy outlines how we collect, use, and safeguard your information when you visit our website or receive our services.

Who We Are

• Data Controller: Enhance Aesthetica Ltd trading as JOURNEY

• Registered Office: 2 Spring Bridge Road, Ealing W5 2AA

• Email: info@journeycliniclondon.com

We are responsible for deciding how and why your personal data is used.

Information We Collect

When you use our website, we may collect:

• Your name and contact details (email, phone, address) if you complete an enquiry or

booking form

• Information you provide about your treatment interests or medical concerns (if you choose to share this)

• Technical details such as your IP address, browser type, and cookies

• Your marketing preferences

How We Use Your Information

We only use your personal data where we have a lawful reason to do so. This may include:

• Responding to your enquiries and providing information about our services

• Managing bookings and consultations

• Sending marketing communications (only with your consent, or if you are an existing

client who hasn’t opted out)

• Meeting legal and regulatory obligations

• Protecting our business against fraud, misuse, or disputes

We will never use your information for unrelated purposes without letting you know.

Sharing Your Information

We may share your data with:

• Regulators or legal authorities when required by law

• Trusted service providers (such as website hosts, email platforms, or payment processors) who work under strict confidentiality and data protection terms

• Fraud prevention or credit reference agencies, if necessary

We will never sell your data to third parties.

International Transfers

Some of our trusted service providers may be based outside the UK. If this happens, your data will only be transferred where appropriate safeguards are in place, such as UK-approved transfer agreements or adequacy decisions.

How Long We Keep Your Data

• Enquiry data: up to 2 years after last contact

• Marketing data: until you withdraw consent or opt out

• Patient records: kept in line with medical and legal record-keeping requirements

When data is no longer needed, it is securely deleted or anonymised.Keeping Your Data Secure

We use a range of technical and organisational measures to keep your personal information safe, including:

• Secure servers with restricted access

• Encryption where appropriate

• Continuous monitoring and risk management

While we take all reasonable steps to protect your data, please remember that the internet cannot be guaranteed to be 100% secure.

Your Rights

Under UK GDPR, you have the right to:

1. Access the personal data we hold about you

2. Correct any inaccurate or incomplete data

3. Request deletion of your data (“the right to be forgotten”) in certain circumstances

4. Restrict or object to how we process your data

5. Request your data in a portable format (where applicable)

6. Withdraw consent at any time (where consent was the basis for processing)

7. Complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk

To exercise your rights, email us at info@journeycliniclondon.com

Cookies & Tracking

Our website uses cookies and similar technologies to:

• Improve website performance

• Analyse visitor behaviour

• Deliver targeted advertising (only with your consent)

You can control cookies through your browser settings. For more detail, please see our Cookies Policy.

Links to Other Websites

Our website may contain links to external sites. We are not responsible for how those websites handle your personal information, so we recommend reviewing their privacy policies.

Testimonials, Images & Results Disclaimer

• All testimonials, images, and videos on our website have been provided voluntarily by

clients/patients with explicit consent.

• Images may be resized or formatted but never altered to change results.

• Treatment results vary for each individual.

Updates to This Policy

We review and update this Privacy Policy regularly. The most up-to-date version will always be available on our website.