Privacy Policy
How we handle your personal information when you use this website or ask us to help arrange treatment.
Effective Date: 1 January 2026 | Domain: https://estheticmedical.co.uk
1. Who We Are (Data Controller)
This website (estheticmedical.co.uk) is operated under the brand Esthetic Medical by EVEREST 8588 Ltd (Company Registration / UIC: 207822908), with registered office at 8 Midia Street, 6560 Topolovgrad, Bulgaria (“we”, “us”, “our”).
For questions about your information or to exercise your rights, email info@estheticmedical.co.uk.
2. Scope & Independent Healthcare Providers
We coordinate enquiries and practical arrangements for treatment in Turkey. A clinic that receives information to assess or treat you is responsible for how it handles its own clinical records.
3. Categories of Personal Data We Process
- Identity & Contact Data: Full name, email address, telephone / WhatsApp number and country/city of residence.
- Enquiry & Coordination Data: Selected procedure or department, preferred travel dates, companion details, flight arrival/departure numbers (once booked) and correspondence history.
- Health information: If a clinic needs information such as X-rays, photographs or medical history for an assessment, your coordinator will explain how to share it.
- Technical information: The server processes information about page requests, including IP addresses. The form uses a record derived from your IP address to limit repeated requests.
4. Special-Category Health Data & Data Minimisation
Health information constitutes “special-category personal data” under Article 9 of the UK GDPR and EU GDPR. We ask that you share only information reasonably necessary for an initial medical assessment, and we process such data strictly on the basis of your explicit consent (Article 9(2)(a)) for the purpose of obtaining a provisional clinical evaluation and treatment offer from appropriate specialists. You may withdraw your consent at any time by emailing info@estheticmedical.co.uk.
5. Purposes & Lawful Bases for Processing
- Responding to enquiries & preparing package quotes: Steps at your request prior to entering into a coordination arrangement (Article 6(1)(b)) and explicit consent for health data (Article 9(2)(a)).
- Organising transfers, hotel stays & clinic appointments: Performance of a contract (Article 6(1)(b)).
- Website security, spam prevention & service improvement: Legitimate interests (Article 6(1)(f)).
- Accounting, tax & regulatory compliance: Compliance with legal obligations (Article 6(1)(c)).
6. Who Receives Your Data
We never sell or rent your personal data. Access is restricted strictly on a need-to-know basis to:
- Authorised Esthetic Medical patient coordinators bound by confidentiality obligations;
- Selected partner hospitals, clinics and licensed consultants in Turkey solely to review your suitability and deliver your chosen care;
- Partner hotels and VIP transfer operators in Turkey (receiving only logistical details such as name, flight number and dates — never medical notes or photographs);
- Secure hosting, email infrastructure and professional accounting/legal advisers under written data-processing agreements.
7. International Data Transfers (United Kingdom / EEA to Turkey)
If you ask us to arrange an assessment with a clinic in Turkey, the clinic may need information to review your case. Before sharing health information, we’ll explain what the clinic needs, who will receive it and how the transfer is handled.
8. Data Retention Schedule
- Enquiries that do not proceed to booking: Retained for up to 12 months from last correspondence (so you can revisit your quote if desired), then securely deleted; special-category photos/scans are deleted earlier upon request.
- Completed coordination bookings: Retained for up to 5 years (or the statutory accounting/limitation period required by applicable law).
- Anti-spam checks: The form uses a temporary record to limit repeat requests. The hosting provider may also retain its own access logs.
9. Technical & Organisational Security
The website uses HTTPS to protect information in transit once HTTPS is active on the host. We ask you to keep your first enquiry brief and contact us for instructions before sending medical records or images.
10. Your Rights Under UK GDPR & EU GDPR
Subject to statutory conditions, you have the right to request access to your personal data, rectification of inaccuracies, erasure (“right to be forgotten”), restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent at any time.
To exercise any right, email info@estheticmedical.co.uk. If you are resident in the United Kingdom and remain dissatisfied with how we handle a concern, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) (ico.org.uk) or the competent EU data-protection supervisory authority (including the Bulgarian Commission for Personal Data Protection, cpdp.bg).
11. Children's Privacy
Our services and website forms are intended for adults aged 18 and over. Enquiries concerning paediatric or adolescent procedures (such as otoplasty) may only be submitted by a parent or legal guardian.
12. Changes to This Policy & Contact
Any material updates to this Privacy Policy will be published on this page with an updated effective date. Questions can be sent at any time to info@estheticmedical.co.uk.