Fair Processing Notice
Fair Processing Notice (Privacy Notice)
1. Introduction
At MonaCo Medical Aesthetic Clinic and Training, we take your privacy seriously and are committed to protecting your personal information.
This Fair Processing Notice explains how we collect, use, store, and share your personal data when you engage with us as a patient, model, student, delegate, or visitor to our training clinic.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
MonaCo Medical Aesthetics
29A Liverpool Road,
Manchester,
M3 4NQ
0191 4007407
contact@monacomedical.co.uk
Website: www.MonaCoMedical.co.uk
Data Protection Officer / Responsible Person: Claire Rafferty
3. What Information We Collect
We may collect and process the following categories of personal data:
A. Patients and Models
- Full name, date of birth, gender
- Contact details (address, phone, email)
- Medical history, medication details, allergies
- Treatment records, photographs, consent forms
- Payment information
- Emergency contact details
B. Students and Delegates
- Name, contact details
- Professional qualifications and registration details (e.g. GMC/NMC/GDC number)
- Attendance and assessment records
- Payment and certification details
C. General Enquiries and Visitors
- Name, contact details, and details of your enquiry
4. How We Use Your Information
We use your personal data for the following purposes:
- To provide safe and effective aesthetic treatments
- To deliver and administer training courses and qualifications
- To comply with professional and regulatory obligations
- To manage appointments, bookings, and payments
- For internal auditing, quality assurance, and improvement of services
- To communicate with you regarding your treatment, training, or enquiry
- To ensure patient safety and uphold clinical governance
We will only process your data when we have a lawful basis to do so, such as:
- Consent (for example, before taking clinical photographs)
- Performance of a contract (e.g. to provide a treatment or training service)
- Legal obligation (e.g. clinical record keeping)
- Legitimate interest (e.g. quality assurance and staff training)
5. How We Store and Protect Your Data
Your information is securely stored in encrypted electronic systems and/or locked physical files. Access is restricted to authorised staff and trainers only.
We retain your personal data for as long as necessary:
- Medical records: Minimum of 10 years after last treatment (in line with healthcare standards)
- Training records: Minimum of 7 years
- Financial records: Minimum of 6 years (for HMRC compliance)
After this period, records are securely destroyed.
6. Sharing Your Information
We will only share your data when necessary and lawful, for example:
- With medical practitioners or educators directly involved in your care or training
- With regulatory bodies (e.g. GMC, NMC, CQC, JCCP) where required
- With payment processors or insurers (for legitimate business purposes)
- With law enforcement or other authorities when required by law
We do not sell or share your personal information for marketing purposes.
7. Your Rights
Under UK data protection law, you have the following rights:
- To be informed about how your data is used
- To access a copy of your personal data
- To request correction of inaccurate information
- To request erasure (in certain circumstances)
- To restrict or object to processing
- To request data portability (where applicable)
- To withdraw consent (where consent is the lawful basis)
You can exercise these rights by contacting us at [insert contact email].
If you are not satisfied with how we handle your data, you have the right to complain to:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
8. Updates to This Notice
We may update this Fair Processing Notice from time to time to reflect changes in legislation or clinic operations.
The latest version will always be available on our website or upon request at reception.