Privacy Policy

Who we are

Dr Oli Aesthetics ("we", "our", "us") is a medical aesthetic practice operating from UNTIL Marylebone, 1 Orchard Street, London W1H 6HJ — with laser treatments delivered at UNTIL Soho, 111 Charing Cross Road, London WC2H 0DT. The practice is part of DR OLI AESTHETICS LTD (Companies House 14633281). Our data controller contact is hello@droli.co.uk.

What personal data we collect

• Contact details you provide when booking (name, email, phone)
• Medical history and relevant health information required for safe treatment
• Clinical photographs taken with your written consent
• Booking and payment information processed securely via Zenoti, our practice management system
• Website analytics — only after you accept the consent banner — via PostHog (EU region). We capture page views, clicks on call/WhatsApp/booking buttons, and aggregated browsing patterns. We never capture form-input text, names, addresses, or any clinical detail.

How we use your data

Your personal and medical data is used solely for the purpose of providing safe clinical treatment, legally required record-keeping (10 years minimum for medical records per GMC guidance), and keeping you informed about your own treatment. We do not sell data, we do not share data with third parties for marketing, and we do not use clinical photographs for marketing without your explicit written consent.

Your rights

Under UK GDPR you have the right to access your data, correct inaccuracies, request deletion (subject to legal retention requirements for medical records), restrict processing, and lodge a complaint with the Information Commissioner's Office. To exercise any right, contact hello@droli.co.uk.

How long we keep your data

Medical records are retained for 10 years from the date of your last treatment, per GMC guidance. Marketing consent can be withdrawn at any time; withdrawal takes effect within 7 working days. Website analytics data is processed by PostHog Inc. in the EU region (Frankfurt) under their EU Data Processing Addendum and retained for 7 years from collection or until you withdraw consent — whichever comes first.

Changes to this policy

This policy was last updated on 4 May 2026. Material changes will be notified to existing patients by email.