Privacy Policy
Who we are
House of Riri is an aesthetics clinic at Hampton House, 10A Great Hampton Street, Birmingham B18 6AQ.
We are the data controller for the information described below. For any questions about your data, or to make a request, contact us at Raheema.maqbool@houseofriri.co.uk.
What we collect
- When you book: your name, email address, phone number, date of birth, and the treatments you’ve booked.
- Before treatment: your medical history, including any conditions, allergies or medications relevant to your treatment, collected through our consent and medical history forms.
- Your consent: a record of the exact wording you agreed to, your signature, and when you signed it.
- During treatment: clinical notes about the treatment carried out, before-and-after photographs where clinically relevant and with your agreement, and the batch numbers of any products used.
- Payment: we do not store your card details. Payments are handled by Stripe. We see only the last four digits and whether the payment succeeded.
- Marketing: whether you’ve agreed to receive marketing by email or text, and when you gave or withdrew that agreement.
Why we collect it
- To provide your treatment. We cannot treat you safely without your medical history and your informed consent. This is necessary to perform our contract with you, and health information specifically is processed on the basis of your explicit consent.
- To meet our professional obligations. Clinical records are kept as evidence of the care provided, as required by professional standards and our insurers.
- To manage your bookings and take payment, including sending you appointment reminders and aftercare.
- To market to you, only where you have agreed to it. You can withdraw that agreement at any time.
How long we keep it
Clinical records, consent forms, treatment notes, photographs and batch records, are kept for seven years.
This is because indemnity insurance in this industry is claims-made: a claim can be brought years after treatment, so the records that would defend it need to outlast the policy.
Booking and payment records are kept for seven years for accounting purposes.
Marketing preferences are kept until you withdraw them, along with a record of the withdrawal.
Who we share it with
We do not sell your data. We share it only with the services needed to run the clinic:
- Aesthetix Systems: our booking and clinical records platform, which stores your information securely on our behalf.
- Stripe: payment processing. They handle your card details directly; we never see them.
- Resend: email delivery for booking confirmations, reminders and aftercare.
All of these process data on our instructions under written agreements. Your data is stored within the UK or EU.
Photographs
We take before-and-after photographs where clinically relevant, and only with your agreement. These form part of your clinical record.
We will never use your photographs for marketing, social media or any promotional purpose without asking you separately and obtaining your specific agreement. Consenting to clinical photography is not consenting to publication.
You can withdraw agreement to marketing use at any time, though images already published may not always be recoverable.
Your rights
Under UK GDPR you have the right to:
- Access the personal information we hold about you
- Correct anything that is inaccurate
- Erase your data, subject to the retention periods above. We may need to keep clinical records for the full seven years even after a request, because those records exist to protect both of us
- Object to processing, and withdraw consent for marketing at any time
- Request a copy of your data in a portable format
To exercise any of these, contact us at Raheema.maqbool@houseofriri.co.uk. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Cookies
We use only the cookies necessary for the website and booking system to function. We do not use advertising or tracking cookies.
Changes to this policy
We may update this policy from time to time. The version on this page is always the current one.
Last updated: September 2026