Legal

    Privacy Policy

    Last updated: 12 May 2026

    1. Who we are

    This Privacy Policy explains how Vale Laser Limited (trading as Vale Laser & Aesthetics, "we", "us", "our") collects and uses personal information when you visit valelaser.co.uk, contact us, or attend one of our clinics in Pontyclun, Cardiff Gate, or Whitchurch.

    We are the data controller for the personal data we hold about you. For any privacy enquiries, contact us at clinic@valelaser.co.uk.

    2. Information we collect

    We may collect and process the following categories of personal data:

    • Contact details — name, email address, phone number, and any message you submit through our website contact form.
    • Appointment & treatment information — treatments enquired about or booked, preferred clinic, and consultation notes (held in our clinical booking system).
    • Health information (special category data) — medical history, skin type, contraindications, and consent forms collected at consultation. This is required to deliver treatments safely.
    • Technical data — IP address, browser type, device, pages visited, and referral source, collected via analytics cookies (only with your consent).

    3. How we use your information & lawful bases

    • To respond to your enquiries submitted via our contact form — lawful basis: legitimate interests (responding to prospective clients).
    • To provide treatments and aftercare — lawful basis: contract for treatment services and explicit consent for processing health data.
    • To meet our legal and clinical record-keeping obligations — lawful basis: legal obligation and provision of healthcare services (UK GDPR Art. 9(2)(h)).
    • To improve our website using anonymised analytics — lawful basis: consent.
    • To send marketing or promotional communications — only where you have opted in. You can unsubscribe at any time.

    4. Who we share your data with

    We do not sell your personal data. We share it only with trusted processors who help us operate, including:

    • Jane App — our online booking and clinical records platform.
    • Resend — email delivery service used to send contact-form notifications to our clinic inbox.
    • Google Analytics — anonymised website usage statistics (only if you accept analytics cookies).
    • Healthcare Inspectorate Wales and other regulators where legally required.

    All processors are bound by data-processing agreements requiring appropriate security and confidentiality.

    5. International transfers

    Some of our service providers (e.g. Google, Resend) are based outside the UK. Where data is transferred internationally, we rely on UK-approved safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

    6. How long we keep your data

    • Enquiry messages: up to 24 months after last contact.
    • Clinical and treatment records: retained in line with UK healthcare guidance (typically a minimum of 8 years from last treatment for adults).
    • Marketing preferences: until you withdraw consent.
    • Analytics data: anonymised and retained per Google Analytics defaults (up to 14 months).

    7. Your rights

    Under UK GDPR, you have the right to:

    • Access the personal data we hold about you
    • Request correction of inaccurate data
    • Request deletion (subject to clinical record-keeping obligations)
    • Restrict or object to processing
    • Request data portability
    • Withdraw consent at any time
    • Lodge a complaint with the Information Commissioner's Office (ICO)

    To exercise any of these rights, email clinic@valelaser.co.uk. We will respond within one calendar month.

    8. Security

    We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls on our clinical software, and staff training on data protection.

    9. Cookies

    For details on the cookies we use and how to manage them, see our Cookie Policy.

    10. Changes to this policy

    We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be highlighted on this page.

    11. Contact us

    Vale Laser Limited
    Email: clinic@valelaser.co.uk
    Phone: 029 2294 7963

    See our Privacy Policy for full details on how we handle your data.