WHO WE ARE Momentum Aesthetics is a nurse-led aesthetic clinic based in Waterlooville, Hampshire. The Data Controller is Jenna Graham, Momentum Aesthetics. Contact: jenna@momentum-clinic.co.uk. Momentum Aesthetics processes your personal data in accordance with UK GDPR and the Data Protection Act 2018. INFORMATION WE COLLECT We may collect your name, date of birth, address, email address and telephone number, together with information required for your care including medical history, medications, allergies, GP details where required, consultation notes and treatment records. We may also hold clinical photographs where appropriate and consented to, and records of payments. Card details are processed securely by our payment providers and are not stored directly by Momentum Aesthetics. WHY WE COLLECT YOUR INFORMATION We use your information to assess your suitability for treatment, provide safe care, maintain accurate clinical records, manage and communicate with you about appointments, and meet our legal, professional, insurance and regulatory obligations. Medical information is processed under Article 9(2)(h) UK GDPR for the provision of healthcare. HOW YOUR INFORMATION IS STORED Client records are stored securely using our cloud-based practice management systems and approved service providers. Access is restricted and protected by appropriate security measures and professional confidentiality obligations. Records are retained in accordance with applicable UK healthcare record-retention requirements and professional guidance. SHARING YOUR INFORMATION Where necessary, information may be shared with your prescribing practitioner, approved service providers acting on our behalf, professional indemnity insurers, or regulatory/legal authorities where required. Your personal information will not be sold. MARKETING Appointment confirmations and essential service communications may be sent as part of providing your care. Marketing communications will only be sent where you have provided the appropriate consent, and you may withdraw this consent at any time. YOUR RIGHTS Under UK GDPR, you may have the right to access your personal data, request correction of inaccurate information, request restriction or deletion where legally permissible, withdraw consent where processing relies on consent, and make a complaint to the Information Commissioner's Office (ICO). ICO website: https://ico.org.uk DATA SECURITY Momentum Aesthetics takes appropriate technical and organisational measures to protect your personal and medical information from unauthorised access, loss or misuse. UPDATES This policy may be updated to reflect changes in law, regulation or clinic practice. The latest version will be available through our website or booking portal. Momentum Aesthetics jenna@momentum-clinic.co.uk