Legal & Privacy

Privacy & Terms

How Aurae collects, uses and protects your personal and clinical data under UK GDPR and POPIA.

Consultant-led care

Harley Street, London
Sandton, Johannesburg
Virtual consultations worldwide

Book a consultation

Last updated: 24 October 2026

Who we are

Aurae Longevity & Aesthetics operates consultant-led dermatology and longevity clinics at 42 Harley Street, London W1G 9PR and 12 Oxford Road, Illovo, Sandton 2196. For the purposes of UK data protection law, Aurae is the data controller for the personal data described in this notice. Our data protection officer can be contacted at privacy@aurae.clinic.

This is a demonstration website built by DevsCircle. No real medical services are provided through this site, and any request submitted through the demonstration form is stored on this server for demonstration purposes only.

What we collect

When you submit a consultation request we collect your name, email address, telephone number, chosen concern, clinic location, preferred date and time, and any notes you choose to provide. We also record the time of submission, the page you submitted from and a hashed form of your IP address for security and abuse prevention.

When you attend a clinic we may hold clinical records, treatment photography, consent forms and correspondence. Clinical records are held separately from marketing data.

Lawful basis

We process your enquiry on the basis of your consent, which you provide by submitting the form and confirming the consent checkbox. Where your enquiry becomes a clinical relationship, we process health data under Article 9(2)(a) of the UK GDPR (explicit consent) and, where applicable, Article 9(2)(h) (provision of health care). You may withdraw consent at any time by contacting us, without affecting care already provided.

How we use your data

  • To respond to your consultation request and arrange an appointment.
  • To provide clinical care, including prescribing, follow-up and safety monitoring.
  • To meet our legal, regulatory and insurance obligations.
  • To improve our services through anonymised audit and patient-reported outcomes.

We do not sell your data, and we do not use clinical data for advertising.

Retention

Enquiries that do not become a clinical relationship are retained for 12 months and then deleted. Clinical records are retained for a minimum of 8 years from the date of last treatment (or until a child patient reaches 25, where applicable), in line with UK and South African medical record guidance. Financial records are retained for 6 years.

Sharing

We share data only with providers who help us deliver care and operate the clinic: our practice management system, secure email and hosting providers, laboratories and, where relevant, your GP or another clinician with your consent. All processors are bound by written data-processing agreements. We may disclose data where required by law or to protect someone’s safety.

International transfers

Our London and Sandton clinics operate shared clinical governance. Where data is accessed across borders we rely on the UK International Data Transfer Addendum and appropriate technical safeguards, including encryption in transit and at rest.

Your rights

You have the right to access your data, to correct it, to request erasure, to restrict or object to processing, and to data portability. You also have the right to withdraw consent and to complain to a supervisory authority.

To exercise any right, email privacy@aurae.clinic. We respond within one month. You can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or, in South Africa, to the Information Regulator.

Cookies

This demonstration site uses only essential cookies required for WordPress administration and form security. We do not set advertising or analytics cookies. If analytics are introduced in future, we will request consent first.

Complaints

We take complaints seriously. Please contact our clinic manager at complaints@aurae.clinic with details of your concern. We acknowledge complaints within two working days and aim to respond substantively within 20 working days. If you are not satisfied, you may escalate to the Care Quality Commission (for regulated activity in England) or the Health Professions Council of South Africa, depending on where you were treated.

Terms of use

Information on this site is general and does not constitute medical advice. Treatment suitability can only be determined through a clinical consultation. Prices shown are starting prices, are subject to assessment, and may change without notice. Images on this site are illustrative simulations created for this demonstration build; they are not photographs of real patients and outcomes vary.

All content, branding and photography on this site are the property of Aurae Longevity & Aesthetics or their licensors and may not be reproduced without permission. This demonstration build is provided by DevsCircle for portfolio purposes; clinical names, credentials and results are illustrative.

Changes

We may update this notice to reflect changes in law or practice. The current version is always published on this page, with the date of last update shown above.