Last updated: 7 October 2026
This privacy policy explains how Dr. Saul Diaz Aesthetics collects, uses and protects your personal information when you visit this website, contact us, book an appointment or receive treatment. We are committed to handling your information lawfully, fairly and securely, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Dr. Saul Diaz Aesthetics is a trading name of Saludable Limited, a company registered in England and Wales (company number 15194107), based in Biggleswade, Bedfordshire. Saludable Limited is the data controller for the personal information described in this policy and is registered with the Information Commissioner’s Office (ICO).
If you have any questions about this policy or your personal information, please contact us at sauldiaz@pm.me.
2. The information we collect
Depending on how you interact with us, we may collect:
- Contact details – your name, email address, telephone number and, for home visits, your address.
- Booking and payment information – appointment details, treatments booked, deposits and payments. Card payments are processed securely by our payment provider; we do not see or store your full card details.
- Health and treatment information – your medical history, medications, allergies, consent forms, consultation notes, treatment records (including products and batch numbers used) and clinical photographs taken before and after treatment.
- Communications – messages you send us by email, WhatsApp, Facebook or Instagram.
- Website usage information – information about how you use this website, collected through cookies and similar technologies where you have given consent (see section 7).
Health information is a special category of personal data and we give it extra protection.
3. How and why we use your information
- To provide safe treatment – assessing your suitability, carrying out consultations and treatments, keeping accurate clinical records and providing aftercare. Lawful basis: performance of a contract with you and our legitimate interests; for health information, the provision of health care (UK GDPR Article 9(2)(h)).
- To manage bookings and payments – taking bookings, deposits and payments, and sending appointment confirmations and reminders. Lawful basis: performance of a contract.
- To respond to your enquiries – replying to messages you send us. Lawful basis: our legitimate interests in responding to you, or taking steps at your request before entering into a contract.
- To meet our legal and professional obligations – keeping records required by law and by our professional regulator (the General Medical Council), handling complaints and insurance claims. Lawful basis: legal obligation and legitimate interests.
- To understand and improve our advertising – measuring how many people find us through online adverts. Lawful basis: your consent, given through our cookie banner.
We will only use clinical photographs for your treatment records unless you give separate, explicit written consent for any other use (for example, on social media). You can withdraw that consent at any time.
We do not sell your personal information, and we do not use automated decision-making or profiling that has legal or similarly significant effects on you.
4. Who we share your information with
We only share your information where necessary, with trusted service providers who process it on our behalf and under our instructions:
- Aesthetic Nurse Software – our online booking, client records and consent system. When you book online you will also be asked to accept our booking terms and conditions, which cover deposits, cancellations and appointments.
- Stripe – secure card payment processing.
- Our website host – which stores this website and its data.
- Google – website and advertising measurement tools (only with your consent).
- Email and messaging providers – such as Proton Mail and WhatsApp, when you choose to contact us that way.
We may also share information with your GP or another healthcare professional if this is needed for your safety and care (we will discuss this with you first unless it is an emergency), with our insurers, professional advisers or the General Medical Council if required, or where we are required to by law.
5. International transfers
Some of our service providers may store or process information outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contractual clauses.
6. How long we keep your information
- Clinical and treatment records (including consent forms and photographs) are kept for at least 10 years after your last treatment. This meets the NHS Records Management Code of Practice, which the General Medical Council asks all doctors to follow (including in private practice), and our professional indemnity insurer’s recommendation, reflecting the time within which a claim could be made. Records may be kept longer where there is a legal or clinical reason to do so.
- Payment and financial records are kept for 6 years to meet tax and accounting requirements.
- Enquiries that do not lead to a booking are deleted within 12 months.
When information is no longer needed, it is securely deleted.
7. Cookies and advertising
This website uses cookies and similar technologies. Essential cookies keep the website working. With your consent, we also use Google advertising cookies to measure how many visitors arrive from our adverts and go on to book. You can accept or decline these cookies using the banner when you first visit, and change your choice at any time. For full details, please see our Cookie Policy.
8. Keeping your information secure
We use appropriate technical and organisational measures to protect your information, including password-protected and encrypted systems, and access limited to those who need it to provide your care.
9. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information (although we may need to keep clinical records for the period above);
- ask us to restrict or object to how we use your information;
- receive your information in a portable format;
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, email sauldiaz@pm.me. We will respond within one month. There is normally no charge.
10. Complaints
If you have a concern about how we handle your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.