You need to keep a record of all client consultation/consent forms, patch tests, photographs and notes for a period of 5 years.