Privacy policy

Last updated: February 12, 2026

Le Petit Saint operates this website and related services as part of the Saint Clinic Group. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, book appointments, purchase products, or interact with our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and Electronic Communications Regulations 2003.

Saint Clinic Group is the data controller responsible for your personal data.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

We may collect and process the following categories of personal data:

  • Identity Data: Name, date of birth, gender
  • Contact Data: Address, email, telephone number
  • Medical Data: Health information relevant to treatments
  • Financial Data: Payment and transaction details
  • Account Data: Login details, preferences
  • Transaction Data: Orders, bookings, returns
  • Technical Data: IP address, device and browser information
  • Usage Data: Website interaction and behaviour
  • Marketing Data: Communication preferences
  • CCTV Data: Video recordings for security purposes

We do not collect anonymised or de-identified data under this policy.

2. How We Collect Your Information

We collect personal data through:

  • Online bookings and registration forms
  • In-clinic treatments
  • Website interactions
  • Email, phone, and customer support communications
  • CCTV monitoring
  • Clinic Minds patient management system (see: https://www.clinicminds.com/privacy-policy)
  • Shopify platform services

3. Purpose of Data Collection

We process personal information to:

  • Provide medical and aesthetic treatments
  • Manage bookings and accounts
  • Process payments
  • Deliver products and services
  • Communicate appointment updates
  • Improve website experience
  • Conduct marketing (with consent)
  • Comply with legal obligations
  • Maintain safety and security

4. Legal Basis for Processing

We process data under:

  • Performance of contract
  • Legal obligations
  • Legitimate interests
  • Consent (for marketing communications)

You may withdraw marketing consent at any time.

5. Data Sharing and Disclosure

We do not sell or rent personal data.

We may share information with:

  • Healthcare professionals
  • Payment providers
  • Shopify and service providers
  • IT and hosting providers
  • Legal and regulatory authorities
  • Affiliates within Saint Clinic Group

All third parties are required to protect your data.

6. Relationship with Shopify

Our website is hosted by Shopify. Shopify processes personal data to operate and improve the platform.

Information may be shared with Shopify and international service providers in accordance with their privacy policies.

Learn more: https://privacy.shopify.com/en

7. Cookies and Tracking

We use cookies to:

  • Improve website functionality
  • Remember preferences
  • Provide relevant content
  • Support marketing

You may manage cookies via your browser settings.

8. Data Retention

We retain data only as long as necessary.

  • Medical records: in line with Clinic Minds policy
  • Financial records: per legal requirements
  • CCTV footage: maximum 30 days unless required

Data is securely deleted after retention periods.

9. Data Security

We implement technical and organisational measures including:

  • Restricted access
  • Encrypted systems
  • Secure storage
  • Staff training

No system is completely secure, and transmission risks remain.

10. Your Rights

Under UK GDPR, you have the right to:

  • Access your data
  • Correct inaccuracies
  • Request deletion
  • Request portability
  • Object to processing
  • Withdraw consent
  • Opt out of marketing

Requests may require identity verification.

11. Children’s Data

Our services are not intended for children. We do not knowingly collect data from minors.

12. International Transfers

Personal data may be processed outside the UK/EEA. We rely on approved safeguards including Standard Contractual Clauses.

13. CCTV Policy

CCTV is used for:

  • Safety and security
  • Crime prevention
  • Asset protection
  • Dispute resolution

Cameras are located only in appropriate areas. No surveillance occurs in treatment rooms or private areas.

Signage is clearly displayed. Footage is securely stored and access is restricted.

14. Complaints and Queries (CCTV & Data)

Contact the Data Protection Officer:

Dr Raul Cetto
Email: DrRaul@saintclinicgroup.com
Phone: 0203 026 6244

You may also contact the Information Commissioner’s Office (ICO).

15. Third-Party Links

We are not responsible for external websites. Please review their privacy policies separately.

16. Policy Updates

We may update this policy periodically. Changes will be posted on our website. Continued use constitutes acceptance.

17. Contact Information

For privacy enquiries or rights requests:

Le Petit Saint Ltd
49 Charles Street
Mayfair, London W1J 5EN
United Kingdom

Email: info@lepetitsaint.com
Phone: +44 20 3026 6244