This Privacy Policy explains how Transform Beauty and Transform Elite collect, use, share, store and protect personal information. It applies to visitors, clients, customers, members, subscribers, consultation clients, event guests and anyone who contacts or interacts with us online, by telephone, in person or through our digital platforms.
For the purpose of this Privacy Policy, “Transform”, “we”, “us” and “our” means, where relevant:
The businesses are connected and work together to support clients across beauty, aesthetics, longevity, skincare, wellness and membership services. Depending on the service, one business may act as the data controller, both may act as independent controllers, or both may act as joint controllers for certain connected activities.
Where we refer to “personal information” or “personal data”, we mean information that identifies you or can reasonably identify you.
Transform Beauty and Transform Elite are connected businesses created to provide joined-up client care across physical clinic services, digital membership services, skincare, nutrition, wellness, retail products and subscriptions.
Where appropriate and lawful, information may be shared securely between Transform Beauty and Transform Elite so that we can:
We only share information where there is a lawful reason to do so, where it is relevant to the service being provided, and where appropriate safeguards are in place. Health, consultation and treatment-related information is treated with enhanced confidentiality and is only accessed by authorised team members where necessary.
Data controllers: Transformations Beauty Limited trading as Transform Beauty / Transform Health & Beauty Clinic and Transform Elite Ltd trading as Transform Elite.
Address: 42 Carfax, Horsham, West Sussex, RH12 1EQ, United Kingdom.
Email: info@transformclinic.co.uk and hello@thetransformelite.com.
Telephone: 01403 241390 and +44 7480 788294.
Company numbers: Transformations Beauty Limited: 01403 241390. Transform Elite Ltd: +44 7480 788294.
We are not currently required to appoint a statutory Data Protection Officer, but privacy enquiries can be sent to the contact details above.
We may collect the following categories of information, depending on how you interact with us:
| Category | Examples |
|---|---|
| Identity information | Name, date of birth, age, gender, title, username, membership status, client number |
| Contact information | Address, billing address, delivery address, email, phone number, emergency contact where relevant |
| Account and membership information | Membership tier, subscription status, benefits, points, rewards, referral activity, preferences, login details |
| Booking and treatment information | Appointment history, treatment notes, consultation forms, consent forms, suitability assessments, patch test records, aftercare notes |
| Health and consultation information | Skin concerns, allergies, medication, medical history, contraindications, pregnancy/breastfeeding status, lifestyle information, wellness goals, relevant blood test or assessment information where provided |
| Images and media | Before-and-after images, treatment images, images you upload, CCTV images where CCTV is in operation, social media content where you consent or tag us |
| Transaction and payment information | Orders, invoices, payments, refunds, subscription payments, failed payments, chargebacks, card token/reference data from payment processors. We do not intend to store full card numbers or CVV codes. |
| Retail and subscription information | Products purchased, skincare or nutrition plans, subscription preferences, delivery details, product suitability notes. |
| Marketing and engagement information | Marketing preferences, consent records, email/SMS engagement, event attendance, campaign responses, competition entries. |
| Technical and website information | IP address, device type, browser, pages visited, cookie identifiers, analytics data, website behaviour, security logs. |
We only use personal information where we have a lawful basis. The table below explains the main reasons we use data.
| Purpose | Examples | Likely lawful basis |
|---|---|---|
| Provide services and treatments | Bookings, consultations, treatment planning, aftercare, service delivery. | Contract, legitimate interests, legal obligations, vital interests where urgent safety issues arise. |
| Membership and subscription administration | Creating accounts, managing tiers, points, benefits, renewals, cancellations, customer support. | Contract, legitimate interests, legal obligations. |
| Retail sales and deliveries | Product orders, delivery, returns, refunds, stock and fulfilment. | Contract, legal obligations, legitimate interests. |
| Health, consultation and suitability assessments | Safety checks, contraindications, treatment suitability, product suitability, aftercare. | Article 6 lawful basis plus Article 9 special category condition, usually explicit consent and/or health/safety/professional record obligations where applicable. |
| Payments and fraud prevention | Processing card payments, recurring billing, failed payments, refunds, chargebacks, fraud monitoring. | Contract, legal obligations, legitimate interests. |
| Marketing and offers | Emails, SMS, WhatsApp, social ads, promotions, events, product launches, education. | Consent, soft opt-in where permitted, legitimate interests for certain existing customer communications, with opt-out rights. |
| Business improvement | Analytics, service quality, reporting, client experience improvement. | Legitimate interests. |
| Legal, tax, insurance and compliance | Accounting, complaints, dispute handling, legal claims, insurance records, regulatory compliance. | Legal obligations, legitimate interests. |
Some information we collect may be special category data, especially health, medical, treatment, skin, allergy, medication, wellbeing, hormone, blood test, consultation and suitability information.
We collect this information only where relevant to the services, treatments, product recommendations or client safety. It may be used to assess suitability, identify contraindications, personalise recommendations, provide aftercare, maintain professional records, deal with complaints, support insurance requirements and protect health and safety.
We treat this information with enhanced confidentiality. It is not used for general marketing unless you have separately agreed or unless the information is used in a properly anonymised way that does not identify you.
We may send marketing about Transform Beauty, Transform Elite, services, treatments, products, memberships, events, skincare, nutrition, wellness and offers where permitted by law.
You can unsubscribe from marketing at any time by using the unsubscribe link, replying STOP where available, changing your preferences, or contacting us. Service messages, appointment reminders, treatment safety messages, membership updates and payment notices are not usually marketing and may still be sent where necessary.
We will not sell your personal information to third-party marketers.
Payments may be processed by trusted third-party payment providers. We do not intend to store full payment card numbers or CVV security codes. Payment providers may store encrypted card tokens or payment references to allow recurring subscription payments, refunds, failed payment management and fraud prevention.
If you join a membership or subscription, we may keep records of payments, billing cycles, failed payments, cancellations, refunds and communications for accounting, contract, legal, fraud prevention and dispute handling purposes.
We may share information with trusted third parties where necessary, including:
Our service providers must process personal information securely and only as permitted by law or under our instructions where they act as processors.
Some systems or providers may process data outside the United Kingdom. Where this happens, we will use appropriate safeguards, such as adequacy regulations, standard contractual clauses, the UK International Data Transfer Agreement or other lawful transfer mechanisms.
We keep personal information only for as long as reasonably necessary for the reason it was collected, including service delivery, client safety, legal, tax, accounting, insurance, complaints and legal claim purposes. Typical retention periods include:
| Information type | Typical retention approach |
|---|---|
| Financial, invoice and tax records | Usually at least 6 years plus the current accounting year, or longer where required. |
| Treatment, consultation and consent records | Usually retained for a suitable period to support client safety, insurance and legal claims. This may be up to 10 years or longer where necessary. |
| Membership and subscription records | For the duration of membership/subscription and then as necessary for legal, accounting, dispute and customer service purposes. |
| Marketing records | Until you unsubscribe or object, plus a suppression record to ensure we respect your choice. |
| Website analytics and cookies | As described in our Cookie Policy or cookie preference tool. |
| Complaints and incident records | As long as needed to investigate, respond, improve services and protect legal rights. |
We use appropriate technical and organisational measures to protect personal information, including restricted access, password controls, staff confidentiality obligations, secure systems, secure storage, encrypted communication where appropriate, staff training and access controls. No system is completely risk-free, but we work to protect your information responsibly.
Subject to legal conditions and exemptions, you may have the right to:
We may need to verify your identity before responding to a request. We will respond within the timescales required by law.
Some treatments and services are not suitable for children or under-18s. Where we provide services to someone under 18, we may require parent or guardian consent and may collect parent/guardian contact information. We do not knowingly collect children’s personal information online for marketing purposes without appropriate consent.
If you have a concern about how we use your personal information, please contact us first so we can try to resolve it.
You also have the right to complain to the Information Commissioner’s Office: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113. Website: www.ico.org.uk.
We may update this Privacy Policy from time to time. The latest version will be published on our website with the last updated date.
