Privacy Policy

EndoFuze Ltd
Effective Date: 28th May 2025

This Privacy Policy explains how EndoFuze Ltd (“we”, “our”, “us”) collects, uses, discloses, and protects your personal data when you interact with us — including when you book treatments, attend training, access our website, or communicate with our team.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

EndoFuze Ltd is a UK-based aesthetics training and treatment provider operating under the trading name EndoFuze™.

Registered Business Name: EndoFuze Ltd
Contact Email: support@endofuze.com
Website: www.endofuze.com
Data Protection Contact: [Insert DPO name if applicable, or "Data Controller – EndoFuze Ltd"]

2. What Information We Collect

We may collect and process the following personal data:

Clients (treatment or consultation bookings):

Full name, date of birth, gender
Contact details (email, phone number, address)
Medical history, allergies, medications
Photos (for clinical or marketing use with consent)
Emergency contact details
Payment details (card information is processed securely by third-party providers)

Students (training bookings):

Full name and contact details
Professional background and qualifications
Payment details and training history
Course access logs and submitted work

Website or social media users:

IP address, browser type, pages visited
Information voluntarily submitted via contact forms, booking forms, or DMs

3. How We Use Your Data

We process personal data for the following lawful reasons:

To provide safe and effective treatments or training
To meet regulatory and insurance obligations
To contact you with pre- and post-treatment instructions
To manage bookings, payments, and invoices
To monitor your progress during training and issue certification
To respond to queries and manage customer service
With consent, to use anonymised images for marketing or education
To comply with legal and regulatory requirements

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Consent – e.g. when you opt-in to marketing or agree to image use
Contract – e.g. providing training, treatments, or customer service
Legal obligation – e.g. clinical documentation or health & safety compliance
Legitimate interests – e.g. improving our services or securing our systems

5. How We Store & Protect Your Data

Your data is stored securely using encrypted systems and password protection.
Paper records (if any) are stored in locked facilities with restricted access.
Only authorised staff members can access your personal data.
We retain medical and training records in line with UK professional and legal standards (typically 6–7 years).

6. Sharing Your Data

We do not sell or share your data with third parties for marketing purposes.

We may share data only when necessary:

With insurance providers, legal advisors, or regulatory authorities if legally required
With healthcare professionals in the event of a medical emergency
With approved processors such as Stripe (for payments), Thinkific (for training), or MailerLite (for emails) — all of whom comply with UK GDPR

7. Your Rights Under UK GDPR

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (in certain circumstances)
Object to or restrict processing
Withdraw consent at any time
Request data portability
Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, email: support@endofuze.com

8. Cookies & Website Analytics

Our website may use cookies to improve user experience and monitor site traffic. You can manage cookie preferences via your browser settings. No personally identifiable data is stored without your consent.

9. Updates to This Policy

This policy may be updated from time to time. We recommend checking it periodically. If substantial changes are made, we will notify clients or students directly where appropriate.

10. Contact Us

For questions, data access requests, or privacy concerns:

EndoFuze Ltd
📧 support@endofuze.com
🌐 www.endofuze.com
16 Brighton Road, Alvaston, Derby. DE248SY