Privacy policy
How we handle your personal information, including your health information.
Who we are
YMK Clinic Ltd (company number SC896480) is the data controller for the information described in this policy. You can contact us at yousef@ymkclinic.co.uk or on 07943 554660.
What we collect
If you enquire, we collect your name, contact details and whatever you tell us in your message.
If you book, our booking system collects your name, contact details, appointment details and any information you provide when booking.
If you attend an appointment, we collect health information. That includes your medical history, medicines you take, allergies, previous treatments, what we find on examination, what we advise, what treatment is given and any complications. Where you agree to it, we also take clinical photographs.
If you use this website, we collect limited technical information about your visit. Analytics are only collected if you accept analytics cookies.
Why we are allowed to hold it
We hold contact and booking information because it is necessary to arrange and provide the service you have asked for.
Health information is a special category of data under UK data protection law. We hold it under Article 9(2)(h) of the UK GDPR, which permits processing for the purposes of medical diagnosis and the provision of health treatment, and under the professional duty of confidence that applies to clinicians.
We rely on your consent for clinical photographs, for any use of those photographs outside your own records, and for analytics cookies. You can withdraw consent at any time.
Clinical photographs
Photographs taken at appointments form part of your clinical record.
Publishing a photograph is a separate decision from taking one. We only publish a photograph where you have given written consent naming where it may appear. You can withdraw that consent at any time by contacting us, and we will remove the image from anywhere we control.
Who else sees your information
We use Pabau as our practice management and booking system, and your records are held there. Pabau processes this information on our instructions.
We may share information where we are required to by law, where it is necessary for your care, or with our insurers and professional advisers if a concern or claim arises.
We do not sell your information. We do not share it with advertisers.
How long we keep it
Clinical records, including photographs, are kept for ten years after your last appointment.
Enquiries that do not lead to an appointment are kept for twelve months.
Your rights
You have the right to ask for a copy of the information we hold about you, to have inaccurate information corrected, and to ask us to delete information or restrict how we use it. You can object to certain processing, and you can withdraw consent where we have relied on it.
Some of these rights are limited where we have a legal or professional obligation to keep clinical records. If that applies to your request, we will explain why.
To make a request, contact us at yousef@ymkclinic.co.uk. We will respond within one month.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will update this policy when our practice changes. This version was published on 5 August 2026.