Privacy Policy

Who we are

Dr Oli Aesthetics ("we", "our", "us") is a medical aesthetic practice operating from UNTIL Marylebone, 1 Orchard Street, London W1H 6HJ: with laser treatments delivered at UNTIL Soho, 111 Charing Cross Road, London WC2H 0DT. The practice is part of DR OLI AESTHETICS LTD (Companies House 14633281). Our data controller contact is hello@droli.co.uk.

What personal data we collect

• Contact details you provide when booking (name, email, phone)
• Medical history and relevant health information required for safe treatment
• Clinical photographs taken with your written consent
• Booking and payment information processed securely via Zenoti, our practice management system
• Website analytics: only after you accept the consent banner, via PostHog (EU region). We capture page views, clicks on call/WhatsApp/booking buttons, and aggregated browsing patterns. We never capture form-input text, names, addresses, or any clinical detail.
• Advertising measurement: only if you switch on Marketing in the consent banner, via the Meta pixel. It tells Meta (Facebook and Instagram) that a browser visited pages on this site, so we can measure our adverts and show them to similar audiences. It never sends your medical history, your booking details, or which specific treatment you enquired about.

How we use your data

Your personal and medical data is used solely for the purpose of providing safe clinical treatment, legally required record-keeping (10 years minimum for medical records per GMC guidance), and keeping you informed about your own treatment. We do not sell data, we never share your medical records, booking details or clinical photographs with any third party for marketing, and we do not use clinical photographs for marketing without your explicit written consent.

The one exception, and only if you switch on Marketing in the consent banner, is anonymous website browsing data shared with Meta by the pixel described above. That is separate from your patient record: it is switched off by default, you can withdraw it at any time from the cookies page, and declining it changes nothing about your care.

Your rights

Under UK GDPR you have the right to access your data, correct inaccuracies, request deletion (subject to legal retention requirements for medical records), restrict processing, and lodge a complaint with the Information Commissioner's Office. To exercise any right, contact hello@droli.co.uk.

How long we keep your data

Medical records are retained for 10 years from the date of your last treatment, per GMC guidance. Marketing consent can be withdrawn at any time; withdrawal takes effect within 7 working days. Website analytics data is processed by PostHog Inc. in the EU region (Frankfurt) under their EU Data Processing Addendum and retained for 7 years from collection or until you withdraw consent: whichever comes first. Meta pixel data, where you have switched Marketing on, is processed by Meta Platforms Ireland Ltd under their controller-to-controller terms and retained per Meta's own policy.

Changes to this policy

This policy was last updated on 5 August 2026. Material changes will be notified to existing patients by email.