Privacy & Cookies Policy

Arubia Aesthetics & Skin Clinic

Registered name: Arubia Ltd
Trading name: Arubia Aesthetics & Skin Clinic

Arubia Ltd is the data controller of your personal data. This means we decide how and why your personal information is collected, used, and protected.

 

Contact details

Contact name: Ru Boyle
Telephone: 07703 483020
Email: ru@arubiaaesthetics.co.uk

​

What this policy covers

This policy explains:

• What personal data we collect

• How and why we use your data

• Our lawful bases for processing

• How we use cookies on our website

• Your data protection rights

• How long we keep your information

• Who we share your data with

• How to make a complaint

​

What information we collect

Personal data

We collect and use the following personal information:

• Name and contact details

• Address

• Date of birth

• Gender

• Occupation (where relevant)

• Emergency contact details

• Marketing preferences

• Transaction and payment information

• Website usage data

Special category (health) data

Because we provide aesthetic and skin treatments, we also collect special category data, which receives additional legal protection:

• Medical history

• Health conditions

• Treatment records

• Allergies and contraindications

​

How we use your information

We use your personal data to:

• Provide safe and appropriate treatments

• Conduct consultations and assessments

• Maintain accurate medical records

• Manage appointments and payments

• Communicate with you about your care

• Send marketing communications (where consent is given)

• Comply with legal, insurance, and regulatory requirements

• Handle enquiries, complaints, or claims

​

Lawful bases for processing

Under UK GDPR, we must have a lawful basis to process your data.

Personal data

We rely on:

• Consent

• Legal obligation

• Legitimate interests (to run our clinic safely and effectively)

Special category (health) data

We rely on:

• Explicit consent

• Provision of health care (Article 9(2)(h) UK GDPR)

You may withdraw consent at any time, although this may limit our ability to provide treatment.

​

Cookies and similar technologies

What are cookies?

Cookies are small text files placed on your device when you visit our website. They help the site function properly, improve performance, and remember preferences.

Cookies do not usually identify you personally but may be linked to other data we hold.

​

How we use cookies

We use cookies to:

• Ensure the website works correctly

• Improve website performance and usability

• Understand how visitors use our website

• Remember user preferences (where applicable)

We do not use cookies to collect medical or sensitive health information.

​

Types of cookies we use

Strictly necessary cookies

These cookies are essential for the website to function and cannot be disabled. They do not store personal data.

​

Analytics / performance cookies (optional – consent required)

These cookies help us understand how visitors use our website, such as pages visited and time spent on the site.

Analytics cookies are only used after you have given consent.

​

Functional cookies (optional – consent required)

These cookies allow the website to remember your preferences and provide enhanced functionality.

​

Managing cookie preferences

When you first visit our website, you will be shown a cookie banner allowing you to:

• Accept all cookies

• Reject non-essential cookies

• Manage cookie preferences

You can also control cookies through your browser settings. Disabling cookies may affect website functionality.

​

Where we get your data from

• Directly from you (consultation forms, consent forms, communications)

• From your use of our website

​

How long we keep your information

We only keep personal data for as long as necessary.

Retention periods

• Medical and treatment records: 7 years from last treatment

• Consultation and consent forms: 7 years

• Financial records: 6 years

• Marketing data: Until consent is withdrawn

• Complaints or claims: 6 years from resolution

​

Who we share your data with

We only share personal data when necessary and lawful.

This may include:

• Emergency services

• Insurers and legal advisers

• Regulators or law enforcement (where required by law)

We never sell your personal data.

​

Your data protection rights

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request erasure (in certain circumstances)

• Restrict processing

• Object to processing

• Request data portability

• Withdraw consent at any time

Requests will be responded to within one month.

​

How to complain

If you have concerns about how we use your personal data, please contact us using the details above.

If you remain unhappy, you can complain to the
Information Commissioner’s Office (ICO):

Address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

​

Updates to this policy

We may update this Privacy & Cookies Policy from time to time. Any changes will be published on this page.

​

Last updated

January 2026