Privacy policy
Last updated: August 2026.
Who we are
Leah Aesthetic Clinic (“the clinic”, “we”) operates this website and is the data controller for the personal data described here. The clinic is at 23 Fitzwilliam Street Upper, Dublin 2, D02 DF74, Ireland. You can reach us at info@leahaestheticclinic.com or +353 87 756 9463.
What we collect
When you use this website
This site does not ask you for any personal data. There is no contact form and no newsletter sign-up. Our hosting provider records standard server logs (including IP address and browser type) for security and reliability. If you consent to measurement cookies, we also collect anonymous statistics about which pages are visited — see our cookie policy.
When you book an appointment
Appointments are booked through Fresha, a third-party booking platform. Any details you give at that point — name, contact details, payment details — are collected and processed by Fresha under their own privacy policy, and shared with us so that we can provide your appointment. We never see your full payment card details.
When you are treated at the clinic
Before any treatment we collect health information relevant to your suitability: medical history, medication, allergies, previous treatments and consent records. Where you agree to before and after photographs, those are held as part of your record. This is health data, which receives additional protection under the GDPR.
When you contact us
Messages you send by WhatsApp, email, phone or social media are kept so we can answer you and, where relevant, alongside your clinical record.
Why we process it, and on what legal basis
- To provide treatment — contract, and for health data, your explicit consent.
- To keep clinical records — legal obligation and legitimate interest in defending our professional position.
- To manage appointments and take payment — contract.
- To answer your questions — legitimate interest in responding to enquiries.
- To measure website use — consent only, which you can withdraw at any time.
- To publish before and after photographs — your separate, explicit, written consent. You can withdraw it, and the images will be removed.
Who we share it with
We do not sell your data. We share it only with providers who help us run the clinic, and only as far as they need it: our booking and payment platform, our website host, and our email provider. Where the law requires it, or where it is necessary to protect someone’s vital interests, we may share information with medical professionals or authorities.
How long we keep it
Clinical records, including consent forms and any clinical photographs, are kept for the period required for healthcare records in Ireland. Enquiries that do not lead to an appointment are deleted once they are dealt with. Website analytics data, where you have consented to it, is aggregated and retained for a limited period.
Your rights
Under the GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask for data to be deleted, where we are not required to keep it;
- ask us to restrict how we use it, or object to that use;
- receive your data in a portable format;
- withdraw consent at any time, without affecting anything done before you withdrew it.
To exercise any of these, email info@leahaestheticclinic.com. We will respond within one month.
Complaints
If you are not satisfied with how we have handled your data, you can complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963 — dataprotection.ie. We would rather you came to us first, but you do not have to.
Changes
If this policy changes, the updated version appears here with a new date at the top.