Updated 06/01/2026
This privacy notice tells you what to expect when The Artemis Clinic collects your personal information. It applies to information we collect about our clients, current and former staff members and co-workers and requests from the aforementioned in relation to data protection rights, queries and freedom of information.
1.a. What information do we ask for and why? Your personal data is data which by itself or with other data available to us can be used to identify you. This privacy notice sets out how we will use your data. We do not collect more information than we need to fulfil our purposes and will not retain it for longer than is necessary.
Most of the personal data we collect is directly from our clients, this information includes:
1.b. How do we use the information provided to us and how long will we keep it for? All information provided is used for the purpose of identification, communication, building a medical profile and communication with GP’s/consultants/imaging and testing services/private health insurance companies. We do not share any of the information you provide us with any third parties, apart from those mentioned in 1c. The information you provide will be held securely by us and our data processors. The clinic stores client data in digital cloud format and does not keep client data in paper format. We do not delete client contact details and medical reports/letters from our database to maintain recognition for returning clients. If you would like your contact details deleted from our database, please inform us and this can be facilitated.
1.c. Who has access to the data we gather?
Our clinic uses Zanda Health which is a cloud-based practice management system. Client data we enter into Zanda Health include all the data mentioned in section 1.a., appointment and payment history, medical notes, medical history and private health insurers details.
Client session notes are digital and are either a: typed, b: voice dictated and transcribed using AI, or c: live voice recorded and transcribed using AI with prior client consent. Zanda uses Amazon Web Services (AWS) for both the live transcription and note summary generation. AWS meets rigorous industry standards for security and compliance, and these services do not retain or store any customer data after processing. All API calls are encrypted with SSL/TLS to ensure data security. No data is used to train the AI model, and all information is processed securely in real-time and not stored or retained. Note draft output specifically focuses on medical or health related content that has either been discussed in the session or provided as additional written context from the practitioner.
For more information about how Zanda Health processes data see – https://zandahealth.com/uk/privacy-policy/
The clinic uses the online pharmacy Healthxchange for the purchasing of aesthetic injectable products for individual treatment. Aesthetic clients’ names, address and D.O.B. is entered in order to purchase products for their treatment. For more information about how Healthxchange processes data see – https://www.healthxchange.com/privacy
For telecoms, the clinic uses BT Cloud Phone which is a VoIP cloud-based phone system. Client data entered into BT Cloud are phone numbers and names. For BT’s privacy policy see www.bt.com/privacy-policy/
It is occasionally necessary to communicate letters/emails/reports with your GP/consultant/private medical insurance company which will be sent by letter, encrypted email, or relevant portals. These communications will include personal contact information and medical reporting/updates. All such communication will be done with your prior verbal consent. The clinic’s IT systems and email services are secured with ESET software.
We use a third-party provider, Mailchimp, to deliver occasional group emails to those who have consented to receive them. To facilitate this, Mailchimp have access to those client’s names and email addresses. We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our e-newsletters. For Mailchimp’s privacy policy see https://www.intuit.com/privacy/statement/
2.a. Enquiries: People who email us: We use ESET to protect select email traffic. We also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
2.b. Those who make a complaint to us: If we receive a complaint, we create a file containing the details of the complaint. This normally contains the identity of the complainant and any other individuals involved. We usually have to disclose the complainant’s identity to whoever the complaint is about and to a legal third party if necessary. This is inevitable where, for example, the accuracy of a person’s record is in dispute.
2.c. Job Applicants, Current and Former Artemis Clinic Staff: The Artemis Clinic is the data controller for the information you provide during the application process. Current and past clinic staff and users will have this data and any subsequent payroll information securely stored in electronic formats. The clinic will keep such records for eight years after which time records will be deleted.
3.a. Your Rights: You have rights which you can exercise in relation to the information we hold about you. You can read more about these rights via the Information Commissioner’s Office’s dedicated webpage – https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/. You have the right of erasure which is the right to withdraw consent for the clinic to hold your personal details on BT Cloud, and Mail Chimp. If you have not had treatment your data can be erased from Zanda Health. If you have had treatment, the relevant data must be retained as part of your medical record. You may withdraw your consent for us to retain your permissible data at any time and without detriment in relation to your data however it will likely impede your ability to have treatment within the clinic.
3.b. Our Data Handling – Queries or Complaints: The Artemis Clinic strives to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our procedures are unfair, misleading, or inappropriate. We would also welcome any suggestions for improving our procedures. You have the right to complain to the Information Commissioner’s Office (tel. 0303 123 1113) if you feel dissatisfied with our use or handling of your personal data.
3.c. Access to Personal Information: We aim to be as open as possible in terms of giving people access to their personal information. Individuals can find out if we hold their personal information by contacting us. If we do hold information we will: respond within four working days, give you a description of it, tell you why we are holding it, tell you who it could be disclosed to and let you have a copy (on presentation of photographic ID) with no charge.
If you have any queries regarding your data protection rights or requests in relation to the contents of the above, please contact the Data Protection Officer at The Artemis Clinic, Ms Elaine Kythreotis, at office@artemisclinic.co.uk or 020 8777 1500.
