Privacy Policy

Please read this privacy notice carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint.

When we use personal data we are regulated by the Information Commissioner under the Retained Regulation EU 2016/679 (“UK GDPR”), the UK Data Protection Act 2018 and the Privacy and Electronic Communications Regulation (together, “Data Protection Legislation”).   We are responsible, as Controller of your personal data, for the processing we do, for the purposes of Data Protection Legislation.

Key terms

It would be helpful to start by explaining some key terms used in this notice:

We, The Editor’s List, TEL, us, ourThe Editor’s List Limited, a company with registration number 10970551 and whose registered office is 63 Bermondsey St, London SE1 3XF.
Personal dataAny information relating to an identified or identifiable natural person
Special category personal dataGenetic and biometric data and personal data concerning, amongst other things, health, sex life or sexual orientation

Personal data we collect

When you visit our website or otherwise engage with us, we will collect, store and use some or all of the following types of personal data from you, depending on whether you are a visitor or a cosmetic practitioner :-

  • Name, Address, Office address, Email address, Mobile number, Bank details, medical history and health information including allergies and procedures.
  • In addition, when you use our website, we collect some technical information about your devices (such as your computer, your mobile, or your tablet) including your IP address and your device ID. Our website is not intended for children and we do not knowingly collect data relating to children.
  • Our website may include links to third-party websites and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for how they use your personal information. When you leave our website, we encourage you to read the privacy policy of every website you visit.


How personal data is collected

We collect personal information directly from you, via some or all of the following means:  when you visit our website as explained above; by email communication or if an enquiry is made via the enquiry form on our website; over the telephone; in writing; in face to face meetings if selected.

How and why we use personal data

Under Data Protection Legislation, we can only use personal data if we have one or more legal basis for doing so.  Our legal basis for collecting your personal data may be that you have given your consent (for example if subscribing for our newsletter or if submitting the Contact Olivia form online); or to perform a contract that we have with you when you agree our Ts and Cs.   Alternatively, that it is in the legitimate interest of The Editor’s List (or other third party) that it be collected and processed, for example to enable us to put our clients in contact with the appropriate cosmetic surgeons, doctors, beauty therapists or other practitioners.

We collect all special category personal data on the condition that you have given us your explicit consent by providing such data in the course of consultation.

We use your personal information if you are a client or potential client, to deliver our services to you and to put you in touch with the very best and most appropriate cosmetic surgeons, doctors, beauty therapists or other practitioners according to your needs.  If you are a practitioner, we use your personal data in order to facilitate the introduction to you of clients for your expertise.

Promotional communications

We will only send you news and information about our events, special offers, podcast episodes and other initiatives if you have given us consent to be on our mailing lists (for example, if you have signed up to receive our newsletter).

Every message we send you will give you the option to opt-out of receiving any further marketing communications from us.

Who we share personal data with

If you are a client or a prospective client, we only share your personal data with our recommended practitioners and then only with your consent.  If you are a practitioner, we only share your personal data with those clients to whom we have recommended your services.  Otherwise, we only share personal data with our retained external third party service providers including cloud computing solutions such as Xero, Microsoft 365, WordPress, the Royal Mail, our Accountants and sometimes HMRC.

We only allow our retained external third parties to handle personal data if we are satisfied they take all appropriate technical and organisational measures (including the prescribed safeguards for the international transfer of personal data where appropriate), to protect all personal data and only on our written instructions.

Where personal data is held and how it is kept safe

Where personal data is stored with any of the third party providers referred to above, we have ensured that such providers encrypt the personal data in transit and at rest and deploy multi-factor authentication and other state of the art security measures which are standard across the industry.

Some personal data may also be held on local spreadsheets, in which case access is controlled by the use of strong passwords and biometric measures.  Data is encrypted at rest.

How long personal data will be kept

We will only retain your personal data for as long as is necessary for the purpose for which we collected it, including for the purposes of discharging our legal and regulatory obligations.  In some cases this can be for up to 7 years.

When it is no longer necessary to retain personal data, we will delete it.


All data subjects have the following rights, which can be exercised free of charge:

AccessThe right to be provided with a copy of personal data held on a data subject
RectificationThe right to require us to correct any mistakes in a data subject’s personal data
To be forgottenThe right to require us to delete personal data—in certain situations
Restriction of processingThe right to require us to restrict processing of certain personal data—in certain circumstances, e.g. if the accuracy of the data is contested
Data portabilityThe right to receive the personal data provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
To objectThe right to object:

—at any time to personal data being processed for direct marketing (including profiling);

—in certain other situations to our continued processing of personal data, e.g. processing carried out for the purpose of our legitimate interests.

Not to be subject to automated individual decision-makingThe right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning a data subject
To withdraw consentThe right to withdraw consent as a legal basis for processing, at any time


For further information on each of those rights, including the circumstances in which they apply, please contact us or see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under Data Protection Legislation.

To exercise any of those rights, please contact us —see below: ‘How to contact us’.

How to complain

We hope that we can resolve any query or concern raised about our use of personal data.

Data Protection Legislation also gives the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at or by telephone: 0303 123 1113.

Changes to this privacy policy

We may change this privacy policy from time to time, when we do we will inform data subjects by the most appropriate means.

How to contact us

We can be contacted by post or email.  Our mailing address is at the top of this Privacy Notice.

Our email address is :

For all data subject rights, please contact:

Last updated:  July 2023