Privacy Policy

Wrinkless (Dr. Carol Mastropierro) Last updated: 15.07.2026

1. Who we are

This website (www.wrinkless.co.uk) is operated by Wrinkless, a doctor-led aesthetics clinic based at:

17a High Street, Alexander House, Stevenage, SG1 3UN, United Kingdom Email: info@wrinkless.co.uk

We are the "data controller" for the personal data described in this policy, which means we decide how and why your personal data is processed.

If you have any questions about this policy or how we handle your data, contact us at info@wrinkless.co.uk or by post at the address above.

2. What personal data we collect

Depending on how you interact with us, we may collect:

  • Contact details: name, email address, phone number, postal address
  • Enquiry and booking information: details you submit via our website contact form, Facebook/Instagram Lead Ads, WhatsApp, or our booking platform (Glowday)
  • Health and treatment information: medical history, skin condition, previous treatments, allergies, and other information you provide during consultations or in pre-treatment forms, which is necessary to assess your suitability for treatment
  • Marketing preferences: whether you've opted in to our newsletter, referral programme, or review lottery
  • Technical data: IP address, browser type, device information, and cookie identifiers collected automatically when you visit our website
  • Communications: records of correspondence if you contact us by email, phone, WhatsApp or social media

We only collect health information that is relevant and necessary to provide safe, appropriate aesthetic treatment.

3. How we collect your data

  • Directly from you, when you fill in a form on our website, book a consultation, complete a Facebook or Instagram Lead Ad form, message us on WhatsApp, or attend a consultation
  • Automatically, through cookies and similar tracking technologies on our website (see Section 8)
  • From third parties, such as our booking platform (Glowday) or Meta Platforms, Inc. (Facebook/Instagram), when you submit an enquiry through one of their tools

4. Facebook / Meta Lead Ads and advertising

We advertise on Facebook and Instagram, which are operated by Meta Platforms, Inc. ("Meta"). If you complete a Lead Ad form on Facebook or Instagram, the information you submit (e.g. name, email, phone number) is shared with us by Meta so we can respond to your enquiry.

We also use the Meta Pixel on our website. This allows us to:

  • Measure the effectiveness of our advertising
  • Build custom and lookalike audiences for future advertising
  • Show you relevant ads on Facebook and Instagram based on your interaction with our site

Meta acts as an independent controller (and in some respects joint controller with us) for data processed through its advertising tools. Meta may combine information it receives from us with other data it holds about you, in accordance with its own privacy policy: https://www.facebook.com/privacy/policy/

You can control how Meta uses your data, and opt out of personalised advertising, via your Facebook/Instagram ad preferences settings, or through the Digital Advertising Alliance's opt-out tools.

5. Why we process your data and our legal basis

PurposeLegal basisResponding to enquiries and booking requestsContract / steps prior to entering a contractProviding consultations and aesthetic treatmentsContract; explicit consent for health data (UK GDPR Art. 9(2)(a))Sending you marketing emails or offers (e.g. newsletter, referral programme)ConsentFacebook/Instagram advertising, including Lead Ads and the Meta PixelConsentImproving our website and servicesLegitimate interestsComplying with legal and professional obligations (e.g. GMC, clinical record-keeping)Legal obligationPreventing fraud or misuse of our referral/review lottery schemesLegitimate interests

Where we rely on consent (for example, marketing emails or advertising cookies), you can withdraw it at any time — see Section 7.

Because treatment information relates to your health, it is "special category data" under UK GDPR. We only process this with your explicit consent, given at consultation, and we keep it secure in line with our clinical record-keeping obligations.

6. Who we share your data with

We may share your data with:

  • Meta Platforms, Inc. — for Lead Ads and advertising, as described in Section 4
  • Glowday — our third-party booking platform, to manage appointments
  • Email/SMS marketing providers — [insert provider, e.g. Mailchimp] to send newsletters and offers, where you've opted in
  • Regulatory and professional bodies — such as the General Medical Council (GMC) or JCCP, where required
  • Professional advisers — such as our accountant, insurer or legal advisers, where necessary
  • Other clinicians, only where relevant to your care and with your consent (e.g. if referring you for a complication review)

We do not sell your personal data. We only share what is necessary for the purpose in question.

7. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data ("right to be forgotten"), subject to our legal and clinical record-keeping obligations
  • Restrict or object to certain processing
  • Data portability
  • Withdraw consent at any time (e.g. unsubscribe from marketing, or opt out of Facebook/Instagram ad tracking)
  • Complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113, if you believe we have not handled your data properly

To exercise any of these rights, contact us at info@wrinkless.co.uk.

8. Cookies

Our website uses cookies and similar technologies, including the Meta Pixel, to:

  • Remember your preferences
  • Understand how visitors use our site
  • Measure and improve our Facebook/Instagram advertising

You can manage or disable cookies through your browser settings. Disabling cookies may affect how the website functions.

[If you have a separate cookie banner/consent management tool, add: "You can manage your cookie preferences at any time via the cookie settings link in the footer of our website."]

9. International data transfers

Meta may transfer data outside the UK, including to the United States, for the purposes described in Section 4. Meta relies on its own safeguards (such as the UK International Data Transfer Addendum / Standard Contractual Clauses) for these transfers. See Meta's privacy policy for details.

10. How long we keep your data

  • Enquiry/lead data that doesn't convert to a client relationship: [insert period, e.g. 12 months]
  • Clinical/treatment records: retained in line with GMC and clinical governance guidance, typically a minimum of [insert period, e.g. 8–10 years, or longer for certain records]
  • Marketing data: until you unsubscribe or withdraw consent

[Confirm exact retention periods with your professional indemnity insurer / GMC guidance before publishing.]

11. Children

Our services are intended for adults. We do not knowingly collect personal data from children under 18 without appropriate consent.

12. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. We encourage you to review it periodically.

14. Contact us

Wrinkless 17a High Street, Alexander House, Stevenage, SG1 3UN, United Kingdom Email: info@wrinkless.co.uk

If you're unhappy with how we've handled your data, you can also contact the Information Commissioner's Office (ico.org.uk).