Effective Date: 5 July 2026
Version: 10.0
1. Introduction
BOOSHTOX LIMITED (“BOOSHTOX”, “we”, “our”, or “us”) is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.
This Privacy Policy explains how we collect, use, store and protect your personal information when you:
Visit our website.
Book an appointment.
Attend our clinic.
Receive medical, aesthetic, laser, wellness or diagnostic services.
Contact us by telephone, email, social media or online.
We process your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all other applicable legislation.
2. Who We Are
BOOSHTOX LIMITED is the Data Controller responsible for your personal information.
Registered Office & Clinic Address: 3 Pendeford Place, Sidestrand, Pendeford Business Park , Wolverhampton, West Mids, WV9 5HD
Telephone: 01902 212888
Website: www.booshtox.com
If you have any questions regarding this Privacy Policy or your personal information, please contact us using the details above.
3. Information We Collect
Depending upon the services you receive, we may collect:
Personal Information
Name
Date of birth
Address
Telephone number
Email address
Emergency contact details
Medical Information
Medical history
Allergies
Current medications
Previous treatments
GP details
Lifestyle information where clinically relevant
Pregnancy or breastfeeding status
Treatment records
Consultation notes
Clinical assessments
Diagnostic Information
Blood test requests
Laboratory reports
Diagnostic results
Health screening information
Aesthetic Treatment Information
Consent forms
Clinical photographs
Before and after photographs
Treatment plans
Injection records
Laser treatment records
Minor surgery records
EMSCULPT Neo® treatment records
Financial Information
Payment records
Invoices
Deposit information
We do not store your full payment card details.
4. How We Collect Information
We collect information when you:
Register as a patient.
Complete medical questionnaires.
Attend consultations.
Receive treatment.
Contact us.
Complete consent forms.
Upload photographs.
Book appointments online.
Make payments.
Visit our website.
Some information may also be received from:
Your GP (with your consent where required).
Hospitals.
Other healthcare professionals.
Accredited laboratories.
Insurance companies where applicable.
5. Why We Use Your Information
We use your information to:
Provide safe medical care.
Assess treatment suitability.
Deliver treatments.
Arrange appointments.
Maintain medical records.
Process laboratory investigations.
Communicate results.
Issue prescriptions.
Provide aftercare.
Respond to enquiries.
Process payments.
Prevent fraud.
Meet our legal obligations.
Improve our services.
We will only use your information where we have a lawful basis for doing so.
6. Lawful Bases for Processing
Depending upon the circumstances, we process your information because:
It is necessary to provide healthcare.
It is necessary to perform our contract with you.
We have your consent.
We have a legal obligation.
We have a legitimate business interest which does not override your rights.
It is necessary for the provision of health or social care under Article 9 UK GDPR.
7. Special Category Data
Healthcare information is classified as Special Category Data.
We process this information only where permitted by law and where appropriate safeguards are in place.
8. Clinical Photography
Clinical photographs may be taken for:
Medical assessment.
Treatment planning.
Monitoring progress.
Maintaining accurate medical records.
Clinical photographs used for marketing, education, publications or social media will only be used where you have provided separate written consent.
You may withdraw marketing consent at any time. Withdrawal will not affect any use that occurred before consent was withdrawn.
9. Who We Share Information With
We may share your information with:
Healthcare professionals involved in your care.
Independent prescribers.
Accredited diagnostic laboratories.
Pharmacies.
Hospitals.
Your GP (where appropriate).
Regulators.
Insurers where applicable.
Professional advisers.
IT providers who securely host our systems.
We will never sell your personal information.
10. Diagnostic Laboratories
Where laboratory testing is required, relevant personal information and biological samples will be securely transferred to our accredited laboratory partners for analysis.
Only the minimum information necessary to perform the requested investigation will be shared.
11. Marketing
We may send you information about our services where permitted by law.
You may unsubscribe from marketing communications at any time.
Appointment reminders and information relating to your treatment are not considered marketing communications.
11A. Patient Communications and Digital Services
To help us provide safe, efficient and convenient care, BOOSHTOX LIMITED may communicate with you using a variety of secure communication methods.
These may include:
- Telephone calls
- SMS text messages
- Secure online booking systems
- Secure patient portals
- Video consultation platforms
- Electronic prescription services
- Postal correspondence where necessary
Where you provide a mobile telephone number or email address, you consent to us using these details to contact you regarding your care.
These communications may include:
- Appointment confirmations
- Appointment reminders
- Changes to appointments
- Requests for additional medical information
- Test results (where appropriate)
- Aftercare advice
- Review appointment reminders
- Prescription information
- Administrative matters relating to your treatment
We take reasonable steps to ensure confidential information is communicated securely. However, electronic communications cannot be guaranteed to be completely secure. You are responsible for ensuring that your contact details remain accurate and that you inform us promptly of any changes.
Messaging Applications
Where you choose to communicate with BOOSHTOX LIMITED using messaging applications (such as WhatsApp or similar messaging platforms), you acknowledge that:
- messaging services may not always provide end-to-end protection for all communications;
- messages should not be relied upon for urgent or emergency medical advice;
- response times may vary outside normal clinic opening hours.
You should not send highly sensitive medical information through messaging applications unless specifically requested by BOOSHTOX LIMITED.
Online Booking Systems
Where appointments are booked online, your personal information may be processed by our secure booking software providers solely for the purpose of managing appointments and delivering healthcare services.
These providers are required to process your information securely and in accordance with applicable data protection legislation.
Video Consultations
Where clinically appropriate, consultations may be carried out using secure video consultation software.
By participating in a remote consultation, you acknowledge that:
- no electronic system is entirely free from technical risk;
- internet connectivity issues may interrupt consultations;
- if confidentiality cannot be maintained, the consultation may need to be postponed or rearranged.
Artificial Intelligence (AI)
BOOSHTOX LIMITED may use artificial intelligence (AI) and automated software tools to support certain administrative and operational functions.
These tools may assist with:
- appointment scheduling;
- document management;
- transcription of clinical notes;
- drafting correspondence;
- administrative workflow;
- quality assurance;
- customer service enquiries.
AI tools are used to support our staff and are not relied upon as a substitute for professional clinical judgement.
Any clinical decisions affecting your care are made by appropriately qualified healthcare professionals.
Where third-party AI service providers process personal information on our behalf, they are required to comply with UK data protection legislation and appropriate contractual confidentiality obligations.
CCTV
Where CCTV operates at our premises, it is used for legitimate purposes including:
- protecting patients, visitors and staff;
- preventing crime;
- investigating incidents;
- protecting clinic property.
CCTV recordings are retained only for as long as reasonably necessary and may be disclosed to law enforcement or regulatory authorities where required by law.
Website Analytics
Our website may collect anonymous statistical information to help us improve our website and services.
This information does not normally identify individual users and may include:
- browser type;
- operating system;
- pages visited;
- duration of visits;
- referring websites.
Where required by law, we will obtain your consent before placing non-essential cookies or similar technologies on your device.
Social Media
If you choose to interact with BOOSHTOX LIMITED through social media platforms, please be aware that information you publish may be visible to others depending on your own privacy settings.
We recommend that confidential medical information is not shared through public social media channels.
Should you contact us through social media, we may ask you to continue the conversation using a more secure communication method to protect your confidentiality.
12. Data Security
BOOSHTOX LIMITED takes appropriate technical and organisational measures to protect your information, including:
Secure electronic medical records.
Password protection.
Encryption where appropriate.
Restricted staff access.
Secure disposal of confidential records.
Regular staff training.
Despite these measures, no electronic system can be guaranteed to be completely secure.
13. How Long We Keep Information
We retain medical records for as long as required by law, regulatory guidance and clinical best practice.
Retention periods vary depending upon the type of treatment and the age of the patient.
When information is no longer required, it will be securely destroyed.
14. Your Rights
Subject to applicable law, you have the right to:
Request access to your personal information.
Request correction of inaccurate information.
Request deletion where appropriate.
Restrict processing.
Object to certain processing.
Request transfer of your information where applicable.
Withdraw consent where processing is based upon consent.
Some rights may be limited where we are legally required to retain healthcare records.
15. Access Requests
You may request a copy of the personal information we hold about you.
We may request proof of identity before releasing information.
Requests should normally be made in writing.
16. Cookies
Our website may use cookies to improve functionality, analyse website usage and enhance your browsing experience.
Where required, you will be asked for your consent before non-essential cookies are used.
Please refer to our Cookie Policy for further information.
17. Third-Party Websites
Our website may contain links to third-party websites.
BOOSHTOX LIMITED is not responsible for the privacy practices or content of external websites.
18. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on our website.
19. Complaints
If you have concerns about how we process your personal information, please contact BOOSHTOX LIMITED in the first instance.
If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO).
Information Commissioner’s Office
Website: https://ico.org.uk
Telephone: 0303 123 1113
20. Contact Us
If you have any questions regarding this Privacy Policy or your personal information, please contact:
BOOSHTOX LIMITED
3 Pendeford Place, Sidestrand, Pendeford Business Park , Wolverhampton, West Mids, WV9 5HD
Telephone: 01902 212888
Website: www.booshtox.com