Legal
Privacy policy
Last updated 18 July 2026
This policy explains what we do with your personal information when you use this website or come to the clinic. The data controller is Aesthetic & Beauty Consultants Ltd, 25 Cabot Square, London, E14 4QZ. For anything about your data, contact management@aestheticnbeauty.co.uk.
What we collect
- Booking and enquiry details — your name, mobile number, email address and anything you write in the notes or message box.
- Appointment details — the treatments you book, the date and time, and what you have paid.
- Health information — at consultation we ask about your medical history, medication, allergies and skin concerns, so we can treat you safely.
- Payment information — card payments are handled by Stripe. We receive confirmation that a payment succeeded and the amount; we never see or store your full card number.
Why we use it, and our lawful basis
- To provide your appointment — performance of our contract with you.
- To contact you about your booking — performance of our contract, or our legitimate interest in running the clinic.
- To treat you safely — health information is special-category data under Article 9 UK GDPR. We rely on Article 9(2)(h), processing for the provision of health or treatment care, and we ask for your explicit consent where that is the appropriate basis.
- To meet our legal duties — including keeping accurate treatment and financial records.
We do not sell your information, and we do not use it for marketing unless you have asked us to.
Who we share it with
Only those who need it to help us run the clinic: our website and hosting provider, our email provider (Microsoft 365) and our payment processor (Stripe). Each acts under contract and may only use your data on our instructions. We may also share information where the law requires it, or to establish or defend legal claims. Some providers may process data outside the UK; where they do, appropriate safeguards such as the UK International Data Transfer Agreement apply.
How long we keep it
Enquiries that do not lead to an appointment are kept for up to 12 months. Treatment records are kept for as long as professional and insurance requirements require, which for aesthetic treatments is normally at least 8 years after your last appointment. Financial records are kept for 6 years as required by tax law.
Your rights
You have the right to ask for a copy of your data, to have it corrected or deleted, to object to or restrict how we use it, to data portability, and to withdraw consent where we rely on it. Deleting treatment records may not always be possible where we must keep them for safety or legal reasons — we will explain if that applies.
To exercise any of these, email management@aestheticnbeauty.co.uk. We will respond within one month.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
See our cookie notice for what this site stores on your device.