Who We Are
Nurse Gemma Medical Aesthetics is run by Gemma Coteman, a nurse on the nursing register, based at Sharla's Hair, Unit 2, School Court, Furlong Way, Highfields Caldecote, CB23 7AA, Highfields Caldecote, Cambridge.
For data protection purposes the data controller is Gemma Coteman, trading as Nurse Gemma Medical Aesthetics, contactable at hello@nursegemma.co.uk. Registered with the Information Commissioner’s Office where required.
What We Collect
Depending on how you interact with the clinic, we may collect:
- Your name, email address, phone number and postal address
- Appointment history and the treatments you have had
- Health information, including your medical history, medication, allergies and relevant conditions
- Consent records, including consent to treatment and consent to use photographs
- Before and after photographs, where you have given separate written consent
- Payment records, though card details are handled by our payment provider and are never stored by us
- Website usage data such as pages visited, collected only if you accept analytics cookies
Why We Use It
Health information is treated as special category data under UK GDPR and is handled with extra care. We use your information to:
- Assess whether a treatment is safe and suitable for you
- Carry out treatment and provide aftercare
- Keep the clinical records a registered nurse is required to keep
- Manage bookings, deposits and payments
- Reply to your enquiries
- Meet legal, insurance and professional obligations
Our Lawful Basis
- Consent, for marketing messages and for using your photographs
- Contract, to provide the treatment you have booked
- Legal obligation, for record keeping and safety reporting
- Legitimate interests, for running and improving the clinic
- Health care provision under Article 9(2)(h), which is our basis for handling health information
Who We Share It With
We do not sell your information. We share it only where necessary, with:
- Our booking and clinical records system, Aesthetic Nurse Software
- Our payment provider, Stripe, who process card payments securely
- Your prescriber or GP, where clinically necessary and with your knowledge
- Our insurer or professional body, if a concern is raised
- Anyone we are legally required to disclose to
How Long We Keep It
Clinical records are kept for eight years after your last appointment, in line with professional record keeping guidance. Enquiries that do not lead to treatment are kept for twelve months. Marketing consent is kept until you withdraw it.
How It Is Kept Safe
Records are held in password-protected systems with access limited to Gemma. Paper consent forms, if used, are stored in a locked cabinet at the clinic. Photographs are stored separately from identifying details wherever practical.
Your Rights
Under UK GDPR you have the right to:
- Ask for a copy of the information held about you
- Ask for inaccurate information to be corrected
- Ask for information to be deleted, subject to our record keeping duties
- Object to or restrict how your information is used
- Withdraw consent for marketing or photograph use at any time
- Complain to the Information Commissioner at ico.org.uk
To exercise any of these, email hello@nursegemma.co.uk. We will respond within one month.
Cookies
Our use of cookies is explained in the cookie policy.
Last updated July 2026.