Privacy Policy

We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or a supervisory authority if you have a complaint.

We collect, use and are responsible for certain personal data about you. When we do so we are regulated under the UK General Data Protection Regulation (UK GDPR) and we are responsible as a controller of that personal data.

Key terms

• We, us, our: Mr Ashley Topps and Mr Petros Yiannoullou, trading as ART Breast.
• Personal data: any information relating to an identified or identifiable individual.
• Special category personal data: data concerning health, together with data revealing racial or ethnic origin, religious or philosophical beliefs, genetic and biometric data, and data concerning sex life or sexual orientation.
• Data subject: the individual the personal data relates to.

Personal data we collect about you

We may collect and use the following personal data about you:

• your name and contact information, including email address and telephone number;
• information to check and verify your identity, such as your date of birth;
• your gender;
• your billing information, transaction and payment details;
• information about how you use our website;
• your medical history and GP information.

We collect and use this personal data to provide our services to you. If you do not provide the personal data we ask for, it may delay or prevent us from providing those services.

How your personal data is collected

We collect most of this personal data directly from you, in person, by telephone, text or email, and/or via our website. However, we may also collect information from a third party with your consent (for example your GP or hospital records) and from cookies on our website (see our Cookie Policy).

How and why we use your personal data

Under data protection law, we can only use your personal data if we have a proper reason, for example: where you have given consent; to comply with our legal and regulatory obligations; for the performance of a contract with you or to take steps at your request before entering into a contract; or for our legitimate interests, provided these are not overridden by your own rights and interests.

We use your personal data to provide our services, to keep our records up to date, to verify your identity, to prevent and detect fraud, to meet our professional, legal and regulatory obligations, for operational reasons such as quality control and training, and to keep our systems secure.

Where we process special category personal data, such as health data, we will also ensure we are permitted to do so under data protection law, for example because you have given explicit consent, the processing is necessary to protect vital interests, or it is necessary to establish, exercise or defend legal claims.

Marketing

We may use your personal data to send you updates about our services by email, text message, telephone or post. Where consent is required we will ask for this separately and clearly. You have the right to opt out of marketing at any time by contacting us or using the unsubscribe link in our emails. We will always treat your personal data with the utmost respect and we never sell or share it for marketing purposes.

Who we share your personal data with

We routinely share personal data with:

• the Breast and Cosmetic Implant Registry, so you can be contacted in the event of a product recall or safety concern;
• third parties who help us deliver our services, such as the hospital, a pathology service, the implant manufacturer or a payment provider;
• other third parties who help us run our business, such as our website host;
• third parties approved by you, such as your GP.

We only allow our service providers to handle your personal data if we are satisfied they take appropriate measures to protect it, and we impose contractual obligations to ensure they only use it to provide services to us and to you. We may also share personal data with auditors, regulators, insurers and law enforcement where we are legally required to do so.

Where your personal data is held and transfers outside the UK

Your personal data is stored on secure, UK based cloud software and may be held at our consulting rooms and hospital premises, and at the premises of the third parties described above. Where it is necessary to transfer your personal data outside the UK, we will only do so where there is an adequacy decision, where appropriate safeguards (such as standard data protection clauses) are in place, or where a specific exception under data protection law applies.

How long your personal data will be kept

We will keep your personal data while we are providing services to you and afterwards for as long as is necessary to respond to questions, complaints or claims, to demonstrate we treated you fairly, and to keep records required by law. When it is no longer necessary to keep your personal data we will delete or anonymise it.

Your rights

You have the following rights, which you can exercise free of charge:

• Access — to be provided with a copy of your personal data.
• Rectification — to require us to correct any mistakes in your personal data.
• Erasure — to require us to delete your personal data in certain situations.
• Restriction — to require us to restrict processing in certain circumstances.
• Portability — to receive your personal data in a structured, commonly used, machine readable format.
• To object — to object to processing for direct marketing, and in certain other situations.
• Automated decisions — not to be subject to a decision based solely on automated processing.

To exercise any of these rights, please contact us using the details below. For more information on your rights, see the guidance from the UK Information Commissioner’s Office (ICO).

Keeping your personal data secure

We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to those who have a genuine business need, and those processing your information do so only in an authorised manner and are subject to a duty of confidentiality. We also have procedures to deal with any suspected data security breach and will notify you and any applicable regulator where we are legally required to do so.

How to complain

Please contact us if you have any query or concern about our use of your information. You also have the right to lodge a complaint with the Information Commissioner at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.

Cookies

Our website uses cookies. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

Changes to this privacy policy

Last updated: June 2026

We may change this privacy policy from time to time. When we do, we will update the date above and, where appropriate, notify you via our website or other means of contact.

How to contact us

You can contact us by post, email or telephone if you have any questions about this policy or the information we hold about you, to exercise a right under data protection law, or to make a complaint:

ART Breast
26 Park Road, Hale, Altrincham, WA15 9NN
Email: info@artbreast.co.uk
Phone: 0161 470 0704