1. Introduction
The Fat Loss Centre is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit our clinic, use our website, or otherwise interact with us.
2. Personal information we collect
We collect the following types of personal information about you:
- Identification information: your name, address, phone number, email address and date of birth.
- Health information: your medical history, treatment records and prescription information.
- Financial information: your payment information, such as card or bank account details.
- Enquiry information submitted through this website: your name, email address, telephone number, the treatment or body area you are interested in, and anything you choose to tell us in the message field. Please do not include detailed medical history in a website form: we will take that securely at consultation.
- Technical and marketing attribution information: the pages you view, the website or advert that referred you (including campaign parameters such as utm_source, gclid and fbclid), your device type, browser user agent, an anonymous session identifier, and a coarse location (country, region, city and timezone) derived at the network edge.
- Anti-spam information: when you submit a form we create a one-way irreversible hash of your IP address, purely to rate limit abusive submissions. We do not store your IP address itself.
We collect this information in a variety of ways, including:
- When you register as a patient at our clinic.
- When you make an appointment or schedule a procedure.
- When you fill out an enquiry, contact or callback form on our website. Submitting a form sends your details to our clinic team by email and stores them in our secure enquiry database.
- When you communicate with us by email, phone or text message.
- Automatically, through analytics on our website, but only where you have accepted analytics cookies and similar technologies.
2a. Our lawful bases for processing (UK GDPR)
- Consent (Article 6(1)(a)): website analytics and attribution, and any marketing communications you opt into. You can withdraw consent at any time.
- Steps prior to entering a contract (Article 6(1)(b)): responding to your enquiry, arranging a consultation and providing a quotation.
- Legitimate interests (Article 6(1)(f)): keeping our website secure and free of spam, and understanding at an aggregate level which channels bring patients to us.
- Legal obligation (Article 6(1)(c)): clinical record keeping and regulatory duties.
- Health data (Article 9(2)(h)): any health information is processed for the provision of healthcare by professionals bound by a duty of confidentiality, or with your explicit consent.
2b. How long we keep your information
- Website enquiries that do not become patients: retained for up to 24 months, then deleted.
- Analytics and attribution records: retained for up to 26 months in a form that identifies only an anonymous session, not you personally.
- Clinical records: retained in line with UK health record retention requirements, normally a minimum of 8 years from the date of your last treatment.
3. How we use your personal information
- To provide you with medical care.
- To bill you for your medical care.
- To communicate with you about your medical care.
- To improve the quality of our medical care.
- To comply with applicable laws and regulations such as UK GDPR.
We may also use your personal information for the following purposes, but only if we have your consent:
- To send you marketing communications.
- To share your personal information with third-party partners (see below).
4. Disclosure of your personal information
We will not disclose your personal information to any third party without your consent, except in the following circumstances:
- To provide you with medical care. We may disclose your personal information to other healthcare providers involved in your care, such as pathology laboratories, your GP or referring clinicians.
- To bill you for your medical care. We may disclose your personal information to insurance companies and other payers.
- To comply with applicable laws and regulations. We may disclose your personal information to government agencies or other entities only as required by law.
5. Security of your personal information
We take reasonable steps to protect your personal information from unauthorised access, use, disclosure, alteration or destruction. These steps include:
- Physical safeguards: security measures that protect our physical facilities from unauthorised access.
- Electronic safeguards: encryption and other security measures protecting your information in transit.
- Administrative safeguards: policies and procedures in place to protect your personal information.
6. Your rights
You have the following rights with respect to your personal information:
- The right to access your personal information.
- The right to rectify your personal information.
- The right to erase your personal information.
- The right to restrict the processing of your personal information.
- The right to data portability.
- The right to object to the processing of your personal information.
To exercise any of your rights, please contact us at info@fatlosscentre.com or call 020 8150 7286.
7. Cookie and similar technology policy
Cookies, and similar technologies such as browser local and session storage, are small pieces of data stored on your device when you visit a website. On first visit we show a consent banner. Nothing other than strictly necessary storage is used until you accept, and declining does not limit your access to any part of this website.
- Strictly necessary (no consent required): your cookie choice itself, secure session storage used to keep forms and pages working, and Cloudflare Turnstile, which protects our enquiry forms from automated spam.
- Analytics and attribution (consent required): an anonymous session identifier and a record of pages viewed, referring website, advertising campaign parameters and coarse location. This tells us which channels, including Google and Meta advertising, bring patients to us. It is first party, held in our own database, and is not sold or shared for cross-site advertising.
- Third-party embeds: our Instagram feed and any embedded video may set cookies controlled by those providers when displayed.
You can withdraw consent at any time by clearing this site's cookies and site data in your browser settings, after which the banner will appear again and you can decline. You can also block or delete cookies entirely through your browser preferences.
7a. Who processes data on our behalf
We use a small number of carefully selected service providers, acting as processors under written terms and, where relevant, appropriate international transfer safeguards:
- Our website hosting, content delivery and bot protection provider, which serves this site and screens form submissions.
- Our database and application platform, which securely stores enquiries and analytics records.
- Our transactional email provider, which delivers enquiry notifications to our clinic inboxes.
- Advertising and social platforms, where you arrive from one of their adverts. We record only the campaign identifier they attach to the link.
We do not sell your personal information, and we do not share your enquiry details with any third party for their own marketing purposes.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make any material changes, we will notify you by email or by posting a notice on our website.
9. Contact us
If you have any questions about this Privacy Policy, please contact us at:
The Fat Loss Centre
1st Floor Atlantic House
351 Oxford Street
London, W1C 2JF
Tel: 020 8150 7286
Email: info@fatlosscentre.com
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.
Updated August 2026.