privacy.
This notice explains how Dr Munroe Clinic collects, uses and protects your personal information, whether you visit this website, get in touch, join our mailing list or become a patient.
Last updated: October 2026
who we are
Dr Munroe Clinic is run by Dr Tiffany Munroe, MBBS MRCS, trading as Dr Munroe Aesthetics & Longevity, at Room 1, 319 King's Road, London SW3 5EP. Dr Munroe is registered with the General Medical Council, number 7293952. For the purposes of data protection law, Dr Munroe Clinic is the controller of your personal information and is registered with the Information Commissioner's Office.
If you have any questions about this notice or your information, please email clinic@drmunroe.com or call 020 8050 5195.
the information we collect
When you visit the website. The website does not use advertising cookies or tracking pixels. The services that host and deliver the site, such as our website provider and font services, receive your IP address and basic technical information in order to display pages to you. We may count visits in aggregate using a cookieless analytics tool, which does not identify you.
When you contact us. If you contact us by email, phone, WhatsApp or a website form, we keep your name, contact details and the content of your message so that we can reply.
When you join our mailing list. We collect your first name, if you give it, and your email address, together with a record of your consent.
When you become a patient. We collect the information needed to assess and treat you safely: your contact details, date of birth, medical history, medications, allergies, details of your consultation and treatment, consent forms, clinical photographs, and payment records. Where blood tests are arranged through the clinic, we also hold the results.
how we use it, and why we are allowed to
To provide your care. We use your information to assess you, plan and carry out treatment, follow up afterwards and keep accurate clinical records. We do this to fulfil our agreement with you, and, for health information, because it is necessary for the provision of health care by a registered medical professional bound by confidentiality.
To reply to you. We use the details you send us to answer your enquiry, because it is in our legitimate interests and yours to do so.
To send you news and offers. We email our mailing list only with your consent, which you can withdraw at any time using the unsubscribe link in every email or by contacting us. If you are a patient, we may also tell you about similar treatments and services, provided you were given the chance to opt out when your details were collected; you can opt out at any time.
To meet our legal and professional obligations. We keep records and share information where the law, our regulator or our professional obligations require it, and to manage our finances and any complaints or claims.
Photographs. Clinical photographs are taken for your medical record and are used only for your care. They are never used on the website, on social media or in any marketing without your separate, explicit written consent, which you can withdraw at any time.
who we share it with
We do not sell your information or share it for others' marketing. We share it only where necessary, with:
- service providers who process it on our behalf under contract: Webflow (website), Pabau (clinical records, appointments and our mailing list), Google Workspace (email), Meta (WhatsApp) and our card payment provider;
- laboratories, when blood tests are arranged through the clinic;
- your GP or another clinician, with your consent, or where it is necessary for your care or safety;
- our medical indemnity provider, insurers and professional advisers, where needed to deal with a complaint or claim;
- regulators, law enforcement or courts, where the law requires it.
WhatsApp. If you contact us on WhatsApp, your messages are processed by Meta. You are welcome to send photographs or anything sensitive by email instead.
international transfers
Some of our service providers store or process information outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy arrangements, such as the UK–US data bridge, or by the Information Commissioner's approved contract terms.
how long we keep it
- Clinical records: eight years after your last treatment, or longer if a complaint, claim or regulatory matter is open.
- Enquiries that do not lead to treatment: up to two years.
- Mailing list details: until you unsubscribe.
- Financial records: six years, as required for tax purposes.
keeping it secure
Your information is held in secure systems with restricted access. Clinical records are kept in a dedicated medical records system rather than on the website, and the website itself holds no clinical information.
your rights
You have the right to ask for a copy of your information, to have it corrected, to ask for it to be deleted or for its use to be restricted, to object to its use, and to receive it in a portable format. Some rights are limited for clinical records, which we are required to keep. To make a request, email clinic@drmunroe.com; we will respond within one month.
If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
under 18s
Dr Munroe Clinic does not treat anyone under the age of 18 and does not knowingly collect information from children.
changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed.
