Last Updated: January 2025
Sculpt by Sumera is a sole proprietorship aesthetic practice specialising in HIFU (High-Intensity Focused Ultrasound) treatments and related aesthetic services, operated by Sumera.
Our details:
We are committed to protecting your privacy and handling your personal data in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We collect different types of information depending on how you interact with our services:
| Type of Data | What We Collect | How We Get It |
|---|---|---|
| Contact Information | Name, email address, phone number, postal address | When you book appointments, contact us, or sign up for updates |
| Treatment Information | Medical history relevant to treatments, treatment preferences, consultation notes, treatment records | During consultations and treatment sessions |
| Payment Information | Payment details for deposits (processed by Stripe - we don't store full card details) | When you make payments or deposits |
| Communication Data | Records of our communications via email, SMS, WhatsApp, and phone calls | When you contact us or we contact you |
| Website Usage Data | IP address, browser type, pages visited, time spent on site, device information | Automatically when you visit our website |
| Marketing Data | Your marketing preferences, engagement with our content, social media interactions | From your interactions with our marketing and social media |
We may request permission to take before and after photos of your treatments. This is always optional and requires your explicit written consent. These photos may be used for:
We use your personal information for the following purposes:
We process your personal data based on the following legal grounds:
Processing necessary to provide our services, manage appointments, and fulfill our contract with you.
For marketing communications, photos for marketing use, and certain optional services.
For business operations, improving services, and ensuring safety (where not overridden by your interests).
Maintaining treatment records as required by professional standards and regulations.
We may share your personal information with the following third parties:
All our third-party providers are required to maintain appropriate security measures and use your data only for the specific purposes we've engaged them for. They cannot use your data for their own purposes.
Some of our service providers may process your data outside the UK. When this happens:
Under UK data protection law, you have the following rights:
Request a copy of the personal data we hold about you
Ask us to correct any inaccurate or incomplete data
Request deletion of your data (subject to legal requirements)
Ask us to limit how we use your data
Receive your data in a portable format
Object to processing based on legitimate interests
Withdraw consent for marketing or other consent-based processing
Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, please contact us using the details in the "Contact Us" section below. We will respond within one month of receiving your request.
Our website uses cookies and similar technologies to:
You can control cookies through your browser settings, but some website functionality may be limited if you disable certain cookies.
We implement appropriate technical and organisational measures to protect your personal data:
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, as required by law.
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
For clients aged 16-18, we require parental or guardian consent before providing any services.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will:
We encourage you to review this policy periodically to stay informed about how we protect your information.
If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your personal data, please contact us:
Email: [email protected]
Phone: 07951 278565
Address: 2nd Floor, 180 West Regent Street, Glasgow, Scotland
Data Protection Contact: Sumera (Practice Owner)
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the UK's data protection authority:
Website: www.ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
This privacy policy is designed to be transparent and comprehensive. If you need any clarification on any section, please don't hesitate to contact us.
