Cala Medical Aesthetics Ltd

Data Protection (GDPR) Policy

1. Purpose

To ensure that personal data is processed lawfully, fairly, and securely in accordance with the UK GDPR and Data Protection Act 2018.

2. Scope

Applies to all personal data processed by Cala Medical Aesthetics Ltd, including patient records and images.

3. Principles

Data will be:

  • Processed lawfully, fairly, and transparently
  • Collected for specified purposes only
  • Adequate, relevant, and limited
  • Accurate and kept up to date
  • Stored securely
  • Retained only as long as necessary

4. Types of Data Collected

  • Personal details (name, DOB, contact details)
  • Medical information
  • Treatment records
  • Photographs (where consent given)

5. Lawful Basis

Data is processed under:

  • Provision of healthcare services
  • Legal obligations
  • Explicit patient consent (where required, e.g. images)

6. Data Security

  • Records stored within secure clinic software
  • Access restricted to authorised users
  • Password protection in place
  • No sharing of login details

7. Data Sharing

Data may be shared with:

  • Prescribers (for treatment purposes)
  • Laboratories (if applicable)
  • Regulators or insurers (if required)

Data will not be shared for marketing without consent.

8. Patient Rights

Patients have the right to:

  • Access their data
  • Request correction
  • Request erasure (where appropriate)
  • Withdraw consent (where applicable)

9. Data Breaches

Any data breach must be:

  • Identified and contained immediately
  • Recorded
  • Reported where required

10. Retention

Patient records will be retained:

  • Minimum 8 years from last treatment

11. Review

Reviewed annually or following changes in regulation.

BEGIN YOUR SKIN HEALTH JOURNEY

Ready To Feel More Confident In Your Skin?

Book your consultation today and receive a comprehensive skin assessment, personalised treatment recommendations and expert guidance tailored to your unique skin goals.

BEGIN YOUR SKIN HEALTH JOURNEY

Book Your Consultation

Every treatment begins with a comprehensive consultation and professional skin assessment. Together, we’ll create a personalised treatment plan tailored to your skin concerns, goals and long-term skin health.

Our location

Office J1a, Innovation Centre, St Cross Business Park, Newport, Isle of Wight, PO30 5WB

This field is required.
This field is required.
Scroll to Top