Updated 25/06/2025
This privacy policy will explain how our organisation uses the personal data we collect from you when you use our website.
We collect data and process data when you:
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our website, we may collect information from you automatically through cookies or similar technology to monitor traffic to our website.
We use your data to process your enquiry, where applicable.
To prevent unauthorised access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online. The duration for which we store data will depend on the nature of your enquiry. Data relating to patient queries will be kept according to NHS requirements. Data relating to market research will be kept according to the relevant section in this policy. Other data relating to general enquiries will be kept for a maximum of 24 months.
Body Aspect will not forward any personally identifiable information received to any third party.
Our company collects the minimum personal identifiable information required for the processing of patient data and report required by the Clinical Commissioning Group. This includes:
Contact details:
Appointment measurements:
Body scan data:
Signed consent
We collect your data at the time of your physical appointment at our body scanning venue.
We use your data to analyse body proportions and body mass index in relation to the criteria used by your Clinical Commissioning Group. We provide a report to your Clinical Commissioning Group that summarises the numerical outputs.
Body Aspect follows the requirements of the NHS Data Security and Protection Toolkit to prevent unauthorised access, maintain data accuracy, and ensure the correct use of information. Personal identifiable information will be stored in accordance with standard NHS requirements regarding the retention of patient data.
Our company collects the following data:
The survey is created using Google Forms and the data is collected when you press ‘Submit’ at the end of the survey.
We use the survey data to analyse current attitudes and preferences.
To prevent unauthorised access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online. Personal identifiable information (email addresses of survey participants) will be stored separately from survey data and will be kept for a maximum of 3 months after completion of the survey or project, for administrative purposes.
From time to time, Body Aspect conducts research activities such as workshops and follow-up interviews as part of service development, evaluation, or grant-funded projects. These activities may involve the collection of personal data such as:
Where such data is collected, participants are provided with a separate participant information sheet and consent form detailing the purpose, use, and storage of their data.
Data collected for these activities is processed based on the participant’s informed consent and is stored securely for the duration of the project. Personal data is anonymised or deleted once the project concludes unless otherwise agreed with the participant.
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
Your right of access:
You have the right to ask us for copies of your personal information. We may charge a
small fee for this service
Your right to rectification:
You have the right to ask us to rectify information you think is inaccurate. You
also have the right to ask us to complete information you think is incomplete.
Your right to erasure:
You have the right to ask us to erase your personal information in certain
circumstances.
Your right to restriction of processing:
You have the right to ask us to restrict the processing of your
information in certain circumstances.
Your right to object to processing:
You have the right to object to our company processing your information
under certain conditions.
Your right to data portability:
This only applies to information you have given us. You have the right to ask
that we transfer the information you gave us from one organisation to another or give it to you. The right only
applies if we are processing information based on your consent or under, or in talks about entering a contract
and the processing is automated.
If you make a request, we will respond within one month. If you would like to exercise any of these rights, please contact us at our email address below.
Body Aspect processes personal data on the following lawful bases under UK GDPR Article 6:
Body Aspect does not use any form of automated decision-making or profiling. All outputs from body scanning and data analysis are reviewed by qualified personnel before any decisions or reports are made.
If you are unhappy with how we have used your data, you have the right to lodge a complaint with the UK supervisory authority:
We use trusted third-party providers to deliver our services securely and effectively. These include:
All data processors operate under data processing agreements in line with UK GDPR and are required to implement appropriate technical and organisational security measures.
Our company keeps its privacy policy under regular review. This privacy policy was last updated on 25th June 2025.