Privacy Policy

1. Privacy Policy

At M2 Medical Ltd. ("we", "us", "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our services or visit www.m2medical.co.uk (the "Site").

Information We Collect

Personal Information: Name, address, email, phone number, date of birth, and payment details.
Sensitive Information: Medical history, photographs (for treatment purposes), and any information provided during consultations.
Non-Personal Data: IP address, browser type, and website interaction data (via cookies).

How We Use Your Information

To provide aesthetic and medical services, including consultations, treatments, and follow-ups.
To process bookings, payments, and issue invoices.
To send appointment reminders, updates, and promotional materials (with consent).
To comply with legal and regulatory obligations (e.g., health records retention).

Data Sharing

Third Parties: We share data with trusted third-party providers such as payment processors (e.g., Stripe), analytics tools (e.g., Google Analytics), and medical labs or pharmacies (if required).
Legal Obligations: We may disclose your information to regulatory authorities or legal entities when required by law.

Data Retention

We retain medical records for at least 8 years from the last treatment date (as per the Care Quality Commission [CQC] guidelines). Non-medical data is retained as long as necessary to fulfil its purpose or meet legal requirements.

Your Rights

Access and Correction: Request access to or correction of your data.
Erasure: Request deletion of non-medical data, where legally permissible.
Marketing Preferences: Opt-out of marketing communications at any time.

Security

We implement industry-standard measures to protect your data, including encryption, secure servers, and access restrictions.

For questions or to exercise your rights, contact us at hello@m2medical.co.uk or write to M2 Medical Ltd., [Insert Business Address].