Privacy Policy

1. Who we are

NexGen Clinic (“we”, “us”) operates the aesthetic and wellness clinic at 2a Thoday Street, Cambridge CB1 3AS, United Kingdom, and the website nexgen.clinic. We are the data controller for personal information collected through our website and clinic.

2. Information we collect

Contact details you provide through enquiry or booking forms (name, email, phone number, treatment interests and messages).

Clinical information collected at consultation (medical history, treatment records, consent forms and clinical photographs) — collected and stored with your explicit consent.

Basic technical data needed to run the website securely (such as IP addresses in server logs).

3. How we use your information

To respond to enquiries and manage appointments.

To provide safe clinical care — medical history and treatment records are essential to treating you responsibly.

To meet legal and regulatory obligations that apply to clinical practice.

We do not sell your data, and we do not share it with third parties for their marketing.

4. Legal bases

We rely on consent (for enquiries and marketing you opt into), contract (to deliver services you book), legitimate interests (running the clinic and website securely) and legal obligation (clinical record-keeping requirements) under UK GDPR.

5. How long we keep information

Enquiry data is kept only as long as needed to handle your enquiry and follow-up.

Clinical records are retained in line with healthcare record-keeping guidance, which requires substantially longer retention periods.

6. Your rights

You have the right to access, correct or (where applicable) erase your data, to object to or restrict processing, and to withdraw consent at any time. To exercise any right, contact us at info@nexgen.clinic. You may also complain to the Information Commissioner’s Office (ico.org.uk).

7. Security

Personal data is stored on secured systems with access limited to clinic staff who need it. Website traffic is encrypted in transit (HTTPS).

8. Information Governance & Subject Access Requests

NexGen Clinics uses secure cloud infrastructure, controlled access, private document storage and audit logging to help protect client information. Where documents are made available to a client as part of a data request, access may be provided through temporary, signed links or time-limited portal access.

You can make a Subject Access Request by emailing info@nexgen.clinic or by contacting us through our website enquiry form. We may need to verify your identity before releasing information so that we can protect personal data and prevent unauthorised access.

9. Contact

Privacy questions: info@nexgen.clinic · +44 7496 337421 · NexGen Clinic, 2a Thoday Street, Cambridge CB1 3AS.

This policy was last updated in 2026 and may be revised from time to time — the current version always appears on this page.