Last updated: 2026. This is a template privacy policy for demonstration and should be reviewed by By Bex & Co before publication.
By Bex & Co Ltd (Company No. 15043458), 9 New Street, Selby, North Yorkshire, YO8 4PT, is the "data controller" for the personal information we collect. You can contact us at bex@bybexandco.co.uk or 07393 816417.
We may collect your name, contact details, appointment history, and relevant health information needed to provide treatments safely (for example, medical suitability for aesthetic and laser treatments). Bookings and payments are handled through our booking provider.
We use your information to manage appointments, deliver treatments safely, keep treatment records, send appointment reminders, and, where you have agreed, share occasional offers and updates. We rely on your consent, our contract with you, and our legitimate interests as the lawful bases for processing.
We use trusted third parties to run the clinic, including our booking system (Ovatu) and our private blood testing partner (GoodBody Clinic). We never sell your data, and we only share what is necessary to provide the service you have requested.
We keep personal and clinical records for as long as required to provide your care and to meet our legal and insurance obligations, after which they are securely deleted.
Under UK GDPR you have the right to access, correct, or request deletion of your information, to object to certain processing, and to withdraw consent at any time. To exercise any of these rights, contact us using the details above. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
This website uses minimal cookies necessary for it to function and, where enabled, to understand how visitors use the site so we can improve it. You can control cookies through your browser settings.