Privacy Policy · Blueness by Oceania

This Privacy Policy explains how Blueness by Oceania ("Blueness", "we", "us", "our") collects, uses, stores and protects your personal information when you visit our website, contact us, or attend a consultation or treatment at either of our London clinics. We are the data controller for the information described below.

1. Information we collect

Contact details — name, email, phone number and postal address.
Health & consultation data — Fitzpatrick skin type, skin concerns, medical history, medications, treatment notes, patch-test results and clinical photography.
Booking & payment data — appointments, deposits and transaction history (processed by our booking and payment providers, not stored on our servers in full).
Website data — device, browser, IP address and basic analytics needed to run and secure the site.

2. How we use your information

To assess suitability for treatment and deliver safe, effective care.
To manage bookings, deposits, reminders and aftercare.
To keep clinical records as required by our insurers and UK healthcare regulations.
To respond to enquiries and, where you have opted in, send occasional updates.
To operate and improve our website.

3. Legal basis (UK GDPR)

We process personal data on the basis of your consent (marketing, clinical photography for portfolio use), the performance of a contract (delivering your treatment), our legitimate interests (running the clinic, security, fraud prevention) and legal obligation (retaining clinical records).

4. Sharing your information

We do not sell your data. We share limited information with trusted providers who help us operate the clinic — including our booking system (Phorest), payment processors, secure cloud hosting, appointment-reminder services and our clinical insurers. All providers are bound by contractual data-protection obligations.

5. Clinical photography

Before-and-after photographs are taken as part of your clinical record. They are only published on our website, gallery or social channels with your separate written consent, which you can withdraw at any time.

6. How long we keep your data

Clinical records are retained for a minimum of 8 years after your last appointment (longer for under-18s), in line with UK healthcare guidance. Marketing preferences are kept until you unsubscribe. Website analytics are retained for up to 26 months.

7. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, and to data portability. To exercise these rights, email info@blueness.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses a small number of essential and analytics cookies to keep the site working and to understand how it is used. You can control cookies through your browser settings.

9. Security

We use appropriate technical and organisational measures to protect your data, including encrypted transmission, access controls and staff training. No system is 100% secure — please contact us immediately if you believe your information has been compromised.

10. Contact

Questions about this policy or your personal data: info@blueness.co.uk · +44 7897 747777.