Legal
Privacy Notice
Last updated: 14 October 2026
This notice explains what happens to your details when you register your interest on this website. It is written in plain language so that it can be read and understood. If anything here is unclear, email us and we will explain it.
The short version
- We ask for your name and email so Dr. Anwar can contact you to arrange your consultation.
- Your phone number, the treatment you are interested in and what you are concerned about are all optional.
- We ask which days suit you so we can offer you an appointment you can make. It is not a booking and nothing is held.
- Everybody who registers is part of our Model Programme. We ask whether you would be happy to have before and after photographs taken. You must answer, but saying no changes nothing, and saying yes is not permission to photograph or publish anything.
- When you register we email you a confirmation with your enquiry reference.
- We do not sell your details, and we do not share them for advertising purposes.
- If you pay us, your card details go straight to Stripe, our payment company. We never see, and never hold, your card number.
- We keep your enquiry for 24 months from the last time you were in contact with us, then delete it. Payment records have to be kept longer, because tax law says so.
- You can ask us to delete your details sooner, at any time, and we will, apart from anything the law makes us keep.
1. Who is responsible for your details
The organisation responsible for your details, called the data controller in law, is:
| Name | Dr Anwar Aesthetics Ltd |
|---|---|
| Company number | 17414183 |
| Address | 16 Beardwood Park, Blackburn, Lancashire, BB2 7BW |
| hello@dranwarclinic.co.uk | |
| ICO registration | ZC235249 |
This notice covers the website only. It covers the details you give us before you become a patient. If you go on to have a consultation or treatment, you will be given a separate patient privacy notice covering your clinical records, which are held under different rules and kept for much longer.
2. What we collect
When you register your interest
You can register in three places on this site: the form at the top of the page, the form near the bottom, and the chat assistant. All three collect the same things:
| What | Required? | Why we ask |
|---|---|---|
| Your name | Yes | So Dr. Anwar knows who she is writing to |
| Your email address | Yes | So we can reply and arrange your consultation |
| Your phone number | No | Only if you would rather be called than emailed |
| The treatment you are interested in | No | So your consultation can be prepared for properly |
| The days of the week that suit you, and whether mornings or afternoons | Yes | So that Dr. Anwar can offer you a consultation you can actually make rather than working down a list in the dark. This is not a booking and nothing is reserved. |
| What you are concerned about | No | So your consultation can be prepared for properly. You can leave this blank or choose "Not sure yet". |
| Whether you are happy to have before and after photographs taken | Yes, but either answer is fine | You must answer it, and saying no makes no difference to your enquiry or to your model prices. Saying yes means Dr. Anwar may ask you, in person, about before and after photographs of your treatment. See below. |
| An enquiry reference, and the date it was given | Automatic | So you and the clinic can refer to the same enquiry. We email it to you when you register. |
| Which form you used, and the date and time | Automatic | So we can answer you in the right order and understand which part of the site people use |
| A record of each box you ticked and each question you answered, and the exact wording that was on screen at the time | Automatic | So we can show we asked your permission properly, and show what you were actually agreeing to rather than what the page says today |
Information about your health
If you tell us which treatment you are interested in, that can say something about your health or your appearance. Data protection law treats this as a special category of information and expects extra care with it.
So: the treatment field is always optional, you can leave it blank or choose "Not sure yet", we ask for your clear permission before you send it, and we use it for one purpose only, which is preparing for your consultation.
Please do not type your medical history, your medication or any diagnosis into the form or the chat. There is no need, and the chat assistant cannot answer medical questions. Everything medical is discussed with Dr. Anwar in person.
The model programme, and photographs
Everybody who registers is part of our Model Programme. When you register we also ask whether you would be happy to have before and after photographs taken of your treatment. You have to answer the question, but either answer is fine: saying no changes nothing about your enquiry or your model prices, and we will not ask you about it again unless you raise it.
What saying yes does, and does not, mean:
- It means Dr. Anwar may ask you about before and after photographs at your appointment.
- It is not permission to take a photograph. Nobody is photographed without being asked again, in person, when you know exactly what treatment and what images are involved.
- It is not permission to publish anything. Photographs are kept as part of your treatment record. Using one anywhere else, including on social media or this website, needs a separate and specific permission from you, asked for at the time.
- You can change your mind at any point, before or after, and we will act on that.
Photographs of a treated area say something about your health, so they are treated as a special category of information, kept with the same care as the rest of your clinical record.
When you pay us
Payments are handled by Stripe, a payment company used by millions of businesses. When you pay, your card details are typed into Stripe's own secure payment form and go straight to Stripe. They do not pass through this website, and we never see or store your card number, expiry date or security code. That is deliberate, and it is the safest way to do it.
What we receive back from Stripe, and keep, is only:
- Your name and the email address used for the payment
- The amount, the date, and what it was for
- Whether it succeeded or failed
- The card type and the last four digits only, so we can match a payment to a refund
- Stripe's own reference number for the payment
- Your billing address, where Stripe asks for it to verify the card
Stripe also uses payment information for its own purposes, mainly to prevent fraud and to meet financial rules it must follow. For those purposes Stripe decides how the information is used, rather than us, so its own privacy policy applies as well as this one. You can read it at stripe.com/gb/privacy.
Information collected automatically
Our website host keeps standard server logs, which include the internet address (IP address) of visiting devices, for security and to keep the site running. We do not use these to identify individual people.
We use no analytics and no advertising trackers. The only cookies anywhere on this site are the two Stripe needs to stop card fraud, and they are only set on the payment page. There is a fuller explanation on our cookies and storage page.
3. Why we use your details, and what allows us to
Data protection law says we must have a specific legal reason, called a lawful basis, for every use of your details. Ours are:
| What we do | Our lawful basis |
|---|---|
| Reply to your enquiry, and contact you to arrange your consultation | Your consent. You asked us to contact you, and you can change your mind at any time. |
| Hold the treatment you told us you are interested in, and what you said you are concerned about | Your explicit consent, which is the higher standard the law requires for health information. Both are optional and you can leave either blank. |
| Hold the days and times that suit you | Your consent. It exists so we can offer you an appointment you can actually make, and nothing else. |
| Email you a confirmation with your enquiry reference when you register | Your consent. It is the answer to the enquiry you just made, so that you know it arrived and can quote the reference back to us. |
| Hold your answer to the photographs question, and ask you about photographs at your appointment if you said yes | Your explicit consent. You must answer the question, but you are free to answer either way and saying no is never held against your enquiry. Photographs themselves are agreed separately, in person, before any are taken. |
| Send you clinic news and offers, but only if you ticked that separate box | Your consent. This is optional, it is never a condition of registering, and every email will have an unsubscribe link. |
| Take your payment, and give you a refund if one is due | Necessary to carry out our contract with you. Once you are paying for something, that is an agreement between us, so we do not need to ask permission separately to complete it. |
| Keep records of payments for tax and accounts | Our legal obligation. HMRC requires businesses to keep financial records, so we cannot delete these on request. |
| Check payments are genuine and prevent fraud | Our legitimate interests, and Stripe's, in not being defrauded. |
| Keep a record that you gave permission, and when | Our legal obligation to be able to show we followed the rules. |
| Keep the site secure and working | Our legitimate interests in running a safe website. |
4. Who can see your details
- Dr. Anwar. She reads and answers the enquiries herself.
- Our staff. A small number of people help Dr. Anwar manage enquiries and appointments. All are bound by a written confidentiality agreement, all see only what they need to do their job, and none may use your details for anything else.
- Our website host and our database provider, which between them serve this site and store the registrations securely.
- Our email provider. Anything you send to us, and our replies to you, are held in the clinic mailbox it runs.
- Stripe, which takes payments. Stripe holds your card details, we do not. Stripe Payments UK Ltd is the company we contract with, and it is authorised by the Financial Conduct Authority.
- Our accountant, who sees payment records but not enquiries.
These companies act on our instructions only. They are not allowed to use your details for their own purposes. We do not sell your details, we do not rent them, and we do not pass them to anyone for advertising.
We would only ever hand your details to anyone else if the law required it, for example a court order.
Where your details are stored
Your registration details are stored on servers in the United Kingdom.
Stripe is a global company and processes payment information outside the United Kingdom, including in the United States. Where that happens, it is covered by the safeguards UK law requires, which in Stripe's case is the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses. The same protection applies to any other provider of ours that moves information abroad.
5. How long we keep your details
| What | How long |
|---|---|
| Your registration, if you never become a patient | 24 months from the last time you were in contact with us, then deleted |
| Your marketing permission, if you gave it | Until you unsubscribe, or 24 months of no contact, whichever is first |
| A record that you unsubscribed | Kept, so we do not accidentally email you again |
| Payment records: what you paid, when, and for what | Six years from the end of the financial year they fall in, because HMRC requires it. We cannot delete these earlier, even if you ask |
| Your card number | Never held by us at all. Stripe holds it, under its own retention rules |
| Your clinical records, if you become a patient | Covered by the separate patient privacy notice, and kept far longer as medical rules require |
Deletion is automatic. You do not have to ask, although you are very welcome to ask sooner.
The one thing we cannot delete on request is a payment record, because keeping it is a legal duty rather than a choice. If you ask us to erase everything, we will delete the rest and keep only the financial entry the law requires, and nothing more.
6. Your rights
These rights are free to use. Just email hello@dranwarclinic.co.uk and say which one you want.
- See what we hold. Ask for a copy of everything we have about you.
- Correct it. If something is wrong, tell us and we will fix it.
- Delete it. Ask us to erase your details.
- Take it elsewhere. Ask for your details in a normal computer format you can give to someone else.
- Pause it. Ask us to keep your details but stop using them while a question is sorted out.
- Object. Tell us to stop using your details for a particular purpose.
- Change your mind. Withdraw your permission at any time. That does not undo anything we did before you withdrew it, but it stops everything from that point.
We answer within one month. We may ask you to confirm who you are first, so that we do not hand your details to the wrong person.
7. If you are not happy
Please tell us first, at hello@dranwarclinic.co.uk. We would rather fix it ourselves.
You also have the right to complain to the UK regulator, the Information Commissioner's Office, at any time:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
8. Some things worth saying plainly
You do not have to give us anything
Registering is completely voluntary. It is not a booking and it costs nothing. If you would rather not leave any details, you can email the clinic directly instead. The only consequence of not registering is that we cannot contact you.
No computer makes decisions about you
We do not use automated decision making or profiling. The chat assistant on this site is not artificial intelligence. It answers only from the words written on this page, it cannot give medical advice, and it never decides anything about you.
Under 18s
This website is not intended for children, and we do not knowingly collect details from anyone under 18. In England it is against the law to give botulinum toxin or cosmetic fillers to anyone under 18 for cosmetic reasons, and Dr. Anwar does not treat under 18s.
Changes to this notice
If we change how we use your details we will update this page and change the date at the top. If the change is significant, and we hold your email address, we will tell you.