Privacy notice

Hermosa PMU Studio is the data controller for personal information collected through this website and during your treatment journey. We only use your information where we have a lawful reason and keep clinical information confidential.

Information we collect

This may include your name, contact details, appointment history, payment status, consultation answers, relevant medical information, treatment notes, photographs and communication preferences. No payment is collected through this website, and we do not ask you to enter card details online.

Your client account and documents

If you create a client account, we store your name, email address and a securely hashed password. We verify your email before linking appointments and private documents. Jade can add documents to your area and record when completed forms have been received. Documents are available to your verified account and authorised studio administrators. You can download forms, complete them and return them by email to hermosa.jm@hotmail.com; please attach the completed file before sending.

Website reviews

If you submit a review, we store your chosen display name, star rating and review text for moderation. With your agreement, these details are published after approval by Jade. Please do not include private contact or medical information. We use a hashed network identifier to limit spam submissions. Contact Jade if you would like your review removed.

Why we use it

• To assess suitability, arrange and safely deliver treatments.
• To take deposits, manage changes and keep an accurate appointment record.
• To send confirmations, preparation guidance, aftercare and service reminders.
• To meet professional, insurance, tax, safeguarding and legal requirements.

Lawful bases

Depending on the information and purpose, we rely on performing our contract with you, legitimate interests in running a safe clinic, legal obligations, and your explicit consent for special-category health information and any marketing use of photographs.

Who receives information

We use carefully selected service providers for secure hosting and records, payments, email and SMS. They may only process information for the agreed service. We do not sell your information. Treatment photographs remain private unless you give separate, specific marketing consent.

Retention and security

Records are protected with role-based access and appropriate technical safeguards. Clinical and financial records are retained only for the period needed to meet professional, insurance and legal duties, then securely deleted or destroyed.

Your rights

You may ask for access, correction, restriction, deletion or transfer of eligible personal information, or object to certain use. You may withdraw consent at any time where consent is the basis. Contact Hermosa using the details in your booking confirmation. You may also complain to the UK Information Commissioner's Office.

Cookies and analytics

Essential technology may be used to keep the booking and sign-in process secure. Optional analytics or marketing cookies will not be enabled without an appropriate choice where consent is required.