Privacy policy
Last updated: 20 October 2026
This Privacy Policy explains how LA VIEL Ltd, trading as LÀVIÉL Clinic ("LÀVIÉL", "we", "us" or "our"), collects, uses, stores and shares your personal information when you visit laviel.com, book or receive a treatment, buy products from our online shop, or otherwise contact us.
LA VIEL Ltd is the data controller for your personal information. We are based at 7 Patcham Terrace, Nine Elms, London SW8 4FN, United Kingdom, and we process personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information we collect
Information you give us
- Contact and identity details, such as your name, date of birth, address, email address and phone number.
- Booking and treatment information, such as the treatments you book, appointment history, consultation notes, treatment records, consent forms and before-and-after photographs taken as part of your care.
- Health information, such as your medical history, medications, allergies, pregnancy or breastfeeding status, skin assessments and any other health details relevant to your treatment.
- Order information, such as products purchased, billing and delivery addresses and payment confirmation. Card details are handled by our payment providers and are not stored by us.
- Communications, such as messages you send us by email, phone, WhatsApp, social media or forms on our website.
- Marketing preferences, such as whether you have signed up to our newsletter.
Information we collect automatically
When you use our website we collect information about your device and how you use the site, such as your IP address, browser type, pages viewed and how you arrived at the site. We collect this using cookies and similar technologies (see section 7).
Information from third parties
We may receive information from our booking system provider, payment providers, Shopify (which hosts our online shop) and, with your consent, from other healthcare professionals involved in your care.
2. Health information
Health information is "special category" data under UK GDPR and is given extra protection. We collect it because we need it to assess whether a treatment is safe and suitable for you, to deliver your treatment and aftercare, and to keep accurate clinical records.
We process health information on the basis that it is necessary for the provision of health care and treatment (Article 9(2)(h) UK GDPR) by, or under the responsibility of, appropriately qualified professionals who are subject to a duty of confidentiality. Where we use before-and-after photographs for any purpose other than your own clinical record, such as on our website or social media, we will only do so with your separate, explicit consent, which you can withdraw at any time.
Access to health information is limited to the clinicians and staff who need it to provide your care.
3. How we use your information and our legal bases
- To provide treatments and services: booking appointments, carrying out consultations and treatments, aftercare and follow-up. Legal basis: performance of a contract with you and, for health information, provision of health care.
- To process orders: taking payment, delivering products, handling returns and customer service. Legal basis: performance of a contract.
- To keep clinical and business records and meet our legal, regulatory and insurance obligations. Legal basis: legal obligation and legitimate interests.
- To communicate with you: appointment reminders, responses to enquiries and important updates. Legal basis: performance of a contract and legitimate interests.
- Marketing: sending news, offers and event information by email or text. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link or by contacting us.
- To run and improve our website, including analytics and security. Legal basis: legitimate interests and, for non-essential cookies, your consent.
4. Who we share your information with
We do not sell your personal information. We share it only where necessary, with:
- service providers who help us run the clinic and website, such as our booking and clinical records system, Shopify, payment processors, email and messaging providers, IT support and delivery companies, who may only use it on our instructions;
- other healthcare professionals, such as your GP, where this is needed for your safety or care, and normally with your consent;
- our insurers, professional advisers and regulators where required; and
- law enforcement or other authorities where we are legally required to do so.
5. International transfers
Some of our service providers, including Shopify, may process information outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
6. How long we keep your information
- Clinical and treatment records, including consent forms and clinical photographs: at least 8 years after your last treatment, in line with UK guidance for medical records.
- Order and financial records: 6 years, to meet tax and accounting requirements.
- Marketing data: until you unsubscribe or withdraw consent.
- Website enquiries and general correspondence: up to 2 years, unless they form part of your clinical record.
After these periods, information is securely deleted or anonymised.
7. Cookies
We use cookies that are necessary for the website and online shop to work, and, with your consent, analytics and marketing cookies that help us understand how the site is used and show relevant advertising. You can manage your choices through the cookie banner on our website and through your browser settings. For details of the cookies used by our shop platform, see Shopify's cookie information.
8. Keeping your information secure
We use appropriate technical and organisational measures to protect your information, including access controls, secure systems and confidentiality obligations for staff. No method of transmission over the internet is completely secure, so please avoid sending sensitive health information by unsecured channels where possible.
9. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information, where we have no legal reason to keep it (clinical records must normally be kept for the period above);
- ask us to restrict or object to certain processing, including direct marketing;
- receive your information in a portable format, in certain circumstances; and
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, contact us using the details below. We will respond within one month.
10. Children
Our treatments and online shop are intended for adults aged 18 and over. We do not knowingly collect personal information from children.
11. Complaints
If you have a concern about how we handle your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated.
13. Contact us
LA VIEL Ltd, trading as LÀVIÉL Clinic
7 Patcham Terrace, Nine Elms, London SW8 4FN, United Kingdom
Email: care@laviel.com
Telephone: +44 20 8050 4413