This Privacy Policy outlines how we, Beauty Aesthetic Clinic (“we,” “our,” or “us”), collect, use, and protect your personal data when you interact with us through our websites, services, and communications. We are fully committed to protecting your privacy and ensuring that your personal data is handled in strict compliance with the General Data Protection Regulation (GDPR) as implemented in the UK through the Data Protection Act 2018.
1. Data Controller
Beauty Aesthetic Clinic, located at 33 Cavendish Square, W1G 0PW, London, is the designated data controller for the personal data collected via our platforms and services. As the data controller, we are responsible for ensuring that your personal data is processed in accordance with this Privacy Policy and applicable laws. Should you have any inquiries or concerns regarding this Privacy Policy or the treatment of your personal data, you can contact us at info@beautyaestheticclinic.co.uk.
2. Types of Personal Data We Collect
We collect and process various categories of personal data, which may include but are not limited to:
- Contact Information: This includes your full name, postal address, email address, telephone number, and any other details you voluntarily provide when contacting us, signing up for our services, or participating in any surveys or events.
- Financial Information: When you engage our services or make a purchase, we collect payment-related data such as credit/debit card details, billing address, and other relevant transaction information to securely process payments.
- Demographic Information: We may collect non-identifiable demographic details such as your postcode, age, gender, and preferences to better tailor our services, offers, and communications to your specific needs.
- Technical Information: This includes data related to your interaction with our websites, such as IP address, browser type, device information, operating system, access times, and the referring website. Such information helps us enhance our website’s functionality and optimize your user experience.
- Cookies and Similar Technologies: Our websites utilize cookies and similar tracking technologies to improve your browsing experience, personalize content, and analyze site usage. Cookies are small data files stored on your device that help us recognize repeat visits, remember your preferences, and improve the overall user experience.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- Service Delivery: To fulfill our contractual obligations by processing transactions, providing customer support, and delivering the products or services you have requested.
- Communication: To contact you regarding your account, service updates, customer feedback, and promotional offers that may be of interest to you. You retain the right to opt out of receiving marketing communications at any time.
- Improvement of Services: To enhance and personalize our website, products, and services based on your preferences, feedback, and usage patterns.
- Legal Compliance: To comply with applicable legal obligations, such as maintaining accurate financial records for tax purposes, fulfilling regulatory requirements, and responding to lawful requests from governmental or judicial authorities.
- Analytics and Cookies: To analyze how our websites and services are used, allowing us to improve functionality, user experience, and content relevance. Cookies and similar technologies enable us to collect and analyze browsing activity, which informs our advertising strategies.
4. Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds, as required by the GDPR:
- Consent: Where you have explicitly consented to specific processing activities, such as subscribing to newsletters or accepting cookies for personalized advertising.
- Contractual Necessity: When the processing of your data is necessary to perform a contract with you, such as processing payments or providing a service you have requested.
- Legal Obligations: To comply with legal obligations that require us to process certain personal data, such as tax laws and regulations.
- Legitimate Interests: When processing is necessary for our legitimate business interests, such as improving our services, enhancing website security, or conducting marketing activities, provided these interests do not override your rights and freedoms.
5. Cookies, Google Services, and Similar Technologies
Our websites use cookies and related technologies, including services provided by Google, to enhance your browsing experience:
- Google Analytics: We employ Google Analytics to collect data on user interactions with our website. This data includes information such as the pages you visit, time spent on each page, and the website you visited prior to ours. This helps us understand user behavior and improve our website’s design and functionality.
- Google Ads and Remarketing: We utilize Google Ads to deliver targeted advertising to users who have previously visited our site. Google Ads cookies help us remember your preferences and present ads that are more relevant to your interests.
- Google Tag Manager: This tool helps us manage website tags (snippets of code), including tracking and analytics tags, which improve our ability to monitor and optimize website performance. Google Tag Manager itself does not collect personal data but facilitates the use of other tags that may do so.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impact the functionality of our websites.
6. Data Sharing and Disclosure
We are committed to protecting your personal data and do not sell or rent your information to third parties. However, we may share your data with the following entities under specific conditions:
- Service Providers: We may engage trusted third-party service providers to assist in operating our websites, processing payments, delivering services, or conducting analytics. These providers are bound by strict confidentiality agreements and are only permitted to process your data as directed by us.
- Legal Authorities: If required by law or in response to lawful requests from governmental authorities, we may disclose your personal data to comply with legal obligations, enforce our policies, or protect our rights, property, or safety.
7. Data Retention
We retain your personal data only for as long as necessary to achieve the purposes outlined in this Privacy Policy, including the satisfaction of any legal, accounting, or reporting obligations. When your data is no longer required, we will securely delete or anonymize it in accordance with applicable data protection laws.
8. Your Rights Under GDPR
Under the GDPR, you have the following rights with respect to your personal data:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request corrections to any inaccurate or incomplete data we hold about you.
- Right to Erasure: You may request the deletion of your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in specific situations, such as while we verify the accuracy of your data or process an objection request.
- Right to Data Portability: You may request that we transfer your personal data to another data controller, where technically feasible.
- Right to Object: You have the right to object to the processing of your personal data based on legitimate interests, including profiling and direct marketing.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at info@beautyaestheticclinic.co.uk. We will respond to your request within one month, as required by GDPR.
9. Security of Your Data
We implement robust technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include encryption, secure access controls, and regular data audits to ensure compliance with industry standards.
10. International Data Transfers
If your personal data is transferred outside the UK or the European Economic Area (EEA), we ensure that appropriate safeguards, such as standard contractual clauses or equivalent measures, are in place to protect your data in compliance with GDPR.
11. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect changes in our data processing practices, legal requirements, or industry standards. We encourage you to review this policy regularly. Any significant changes will be communicated to you through appropriate channels, such as email notifications or website alerts.
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Beauty Aesthetic Clinic
33 Cavendish Square
W1G 0PW, London
Email: info@beautyaestheticclinic.co.uk