How we collect, use and protect your personal information.
Last updated: July 2026
Riviera Aesthetics by Dr Omeshwari ("we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store and protect information about you when you visit our website or engage with our services.
We are registered as a data controller in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this policy or our data practices, please contact us at [email protected].
We may collect and process the following categories of personal information:
Information you provide to us directly: When you complete our contact form, book a consultation or communicate with us by email or telephone, we collect your name, email address, telephone number and any information you choose to share about your treatment interests or concerns.
Medical and health information: When you attend a consultation, we collect relevant medical history, health conditions, medications and other clinical information necessary to assess your suitability for treatment and to provide safe, appropriate care. This constitutes special category data under UK GDPR and is handled with the highest level of care and confidentiality.
Website usage data: We may collect standard technical data about your visit to our website, including your IP address, browser type, pages visited and time spent on the site. This information is collected in aggregate and is used solely for the purpose of improving our website and services.
We use your personal information for the following purposes:
To respond to your enquiries: When you contact us via our website or by email, we use the information you provide to respond to your enquiry and to facilitate the booking of consultations.
To provide clinical care: We use your medical history and clinical information to assess your suitability for treatment, to develop your personalised treatment plan and to provide safe, appropriate aesthetic medical care.
To fulfil our legal obligations: As a medical practice, we have legal and regulatory obligations to maintain accurate patient records. We process your data on this basis where required.
To improve our services: We may use anonymised, aggregated data to understand how our website is used and to improve our service offering.
We do not use your personal information for marketing purposes without your explicit consent, and we do not sell or share your personal information with third parties for commercial purposes.
We process your personal information on the following legal bases under UK GDPR:
Contractual necessity: Processing your contact and booking information is necessary to respond to your enquiries and to provide the services you have requested.
Legitimate interests: We have a legitimate interest in maintaining records of enquiries and communications for the purposes of providing and improving our services, where this does not override your rights and interests.
Legal obligation: We are required by law to maintain certain records as a registered medical practitioner.
Vital interests / explicit consent: Where we process special category data (medical and health information), we do so on the basis of the provision of health or social care, or with your explicit consent.
We retain your personal information only for as long as is necessary for the purposes for which it was collected, or as required by law.
Patient clinical records are retained for a minimum of eight years from the date of last treatment, in accordance with UK medical records retention guidelines. Where records relate to a patient who was under 18 at the time of treatment, records are retained until the patient's 25th birthday or for eight years from the date of last treatment, whichever is longer.
Enquiry and contact data is retained for a period of 12 months from the date of initial contact where no treatment relationship is established, after which it is securely deleted.
When personal data is no longer required, it is disposed of securely and in accordance with applicable data protection regulations.
Under UK GDPR, you have the following rights in relation to your personal information:
Right of access: You have the right to request a copy of the personal information we hold about you.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal information. Please note that this right may be limited where we have legal obligations to retain data.
Right to restriction: You have the right to request that we restrict the processing of your personal information in certain circumstances.
Right to data portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, machine-readable format.
Right to object: You have the right to object to processing based on legitimate interests.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one calendar month. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Google reCAPTCHA: Our contact form uses Google reCAPTCHA v3 to protect against spam and automated submissions. reCAPTCHA collects hardware and software information and sends it to Google for analysis. Google's use of this data is governed by the Google Privacy Policy.
Google Fonts: Our website loads fonts from Google Fonts, which may result in your IP address being transmitted to Google's servers. Google Fonts does not use cookies or tracking for this purpose.
No data sales: We do not sell, rent or otherwise share your personal information with third parties for commercial or marketing purposes under any circumstances.
Changes to this policy: We may update this Privacy Policy from time to time to reflect changes in our practices or applicable regulations. The date of the most recent revision is indicated at the top of this page. We encourage you to review this policy periodically.
If you have any questions about how we handle your personal information, please do not hesitate to contact us.
Contact Us