Sculpt & Align - Client Privacy Notice
Last updated: October 2026
Your privacy matters to us. This notice explains how Sculpt & Align collects, uses and protects your personal information when you enquire about or receive body-sculpting treatments.
Who is responsible for your information?
The data controller is Corinne Hough trading as Sculpt & Align Limited.
Contact email: corinne@sculptandalign.com
Postal contact address: 12 Bollin Court, Widnes, WA8 5EA
Telephone: 07448229012
What information do we collect?
Depending on your enquiry and treatment, we may collect:
Your name, contact details and relevant age or date-of-birth information.
Enquiries, appointment details and correspondence.
Relevant health information you provide, including medical conditions, medication, pregnancy status and contraindications.
Consultation forms, consent records, treatment notes and aftercare records.
Payment and transaction records.
Treatment photographs and measurements, where agreed.
We collect information directly from you through consultations, forms, messages, telephone calls and bookings. Payment or booking providers may also supply relevant transaction and appointment information.
Why do we use your information?
We use your information to:
Respond to enquiries and arrange appointments.
Assess treatment suitability and provide appropriate treatment and aftercare.
Maintain accurate treatment and consent records.
Process payments and manage bookings.
Respond to complaints and establish, exercise or defend legal claims.
Meet applicable legal and accounting obligations.
Send marketing messages or publish photographs only where you have separately agreed.
Providing relevant health information is necessary for us to assess suitability. If you choose not to provide it, we may be unable to offer treatment.
Our lawful bases
We rely on the following UK GDPR lawful bases:
Contract: to take steps at your request before booking and to manage and deliver booked services.
Legitimate interests: to respond to general enquiries, maintain appropriate business records, manage complaints and protect our legal rights, where these interests are not overridden by your rights.
Legal obligation: where record-keeping or disclosure is required by law.
Consent: for optional marketing and promotional use of your photographs.
For health information used to assess suitability and deliver treatment, we also obtain your explicit consent under Article 9(2)(a).
Where health information must be retained or used for establishing, exercising or defending legal claims, we may instead rely on Article 9(2)(f), alongside an appropriate lawful basis.
Photographs and marketing
Permission to take photographs for treatment records is separate from permission to publish them.
We will obtain separate, optional consent before using identifiable photographs, testimonials or treatment stories in marketing. That consent will explain the intended uses and channels.
You can receive treatment without agreeing to promotional use of your information.
You can withdraw marketing or photograph-publication consent by contacting us. We will stop future use and remove material from channels we control where reasonably possible. We cannot guarantee retrieval of copies already printed, downloaded or shared by others.
Who may receive your information?
We share only information necessary for the relevant purpose with:
Booking and client-record providers: HeyGoldie, the platform I use to take bookings, manage appointments and keep client records, including your contact details, treatment history and any consultation or health information you provide when booking.
Payment providers: Stripe. They process your payment, so I don’t see or store your full card details.
Email, messaging and storage providers: Squarespace, which hosts this website and handles enquiries sent through its contact forms; HeyGoldie platform for emailing you about your appointments, enquiries and aftercare messages.
Accountants, insurers and professional advisers where necessary.
Authorities or other recipients where disclosure is legally required or otherwise lawfully justified.
Health and treatment information is shared only where necessary and where an appropriate legal basis and special-category condition apply.
Where is your information stored?
Your records are held using the HeyGoldie platform.
We use appropriate safeguards to protect information against unauthorised access, loss or misuse. Access is limited to people who need it for their work.
How long do we keep information?
We retain information only for as long as necessary for its purpose.
Enquiries that do not lead to treatment: 12 months from the last contact, then deleted.
Consultation, consent and treatment records: 7 years after your last treatment, in line with insurer requirements and to allow for any future claim. For clients under 18, until 7 years after their 18th birthday.
Treatment photographs: 7 years after your last treatment, kept with your treatment record. They are used only to track your results and are never shared or published without your separate written consent.
Financial records: 6 years from the end of the financial year to which they relate, in line with tax and accounting obligations.
Marketing records and promotional photographs: Marketing preferences are kept until you unsubscribe or ask us to stop. Promotional photographs are used only with your consent, and you can withdraw it at any time. We remove them from active use on request and review them every 2 years.
Records may be retained longer where necessary for an ongoing complaint, legal claim or legal obligation. Information is securely deleted or destroyed when no longer needed.
We may keep a minimal record of an unsubscribe request to ensure we respect your preference.
Your rights
Depending on the circumstances, you may have the right to:
Access your personal information.
Correct inaccurate or incomplete information.
Request deletion or restriction of its use.
Object to processing based on legitimate interests.
Receive certain information in a portable format.
Withdraw consent at any time.
You have an absolute right to object to use of your information for direct marketing.
Withdrawing consent does not affect processing already carried out lawfully. If you withdraw consent to use essential health information, we may be unable to continue treatment. Some records may still need to be retained on another lawful basis, which we will explain.
To exercise your rights, contact corinne@sculptandalign.com. We normally respond within one month, subject to permitted extensions.
Automated decisions
We do not make solely automated decisions about you that have legal or similarly significant effects.
Concerns or complaints
Please contact us using the details above if you have concerns about your information. We’ll do our best to put things right.
You can also complain to the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Changes to this notice
We review this notice when our services or information-handling practices change. The latest version is always available at www.sculptandalign.com/privacypolicy or on request from corinne@sculptandalign.com.
Last updated: 19th October 2026,