Privacy Policy

A legal disclaimer

1. Introduction

Welcome to Aesthetics by Claire. We are committed to protecting your privacy and ensuring that your personal information is handled safely, securely and responsibly.

This Privacy Policy explains how Aesthetics by Claire collects, uses, stores and protects your personal information when you visit our website, contact us, book an appointment or receive our aesthetic treatments.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or providing your personal information, you acknowledge that you have read this Privacy Policy.

2. Who We Are

Aesthetics by Claire is responsible for the personal information collected and processed in connection with our website and services.

Business name: Aesthetics by Claire
Business owner: Claire Blaxill
Business address: 25a High St, Chesham HP5 1BG
Email address: info@aesthetics-by-claire.com
Telephone: 07359315660
Website: https://www.aesthetics-by-claire.com/

For the purposes of data protection law, the business is the data controller of the personal information it collects, unless otherwise stated.

3. What Personal Information We Collect

We may collect and process the following categories of personal information:

Personal and contact information

Your name and surname.
Email address and telephone number.
Contact and appointment details.

Booking and treatment information

Appointment dates and times.
Treatment preferences and relevant booking history.
Payment status and transaction details, where applicable.

Health and medical information

Medical history relevant to your treatment.
Allergies, medications and existing medical conditions.
Skin concerns, contraindications and treatment suitability information.
Consultation forms, consent forms and relevant aftercare information.
Before-and-after photographs, where taken and appropriately authorised.

Health information is considered special category personal data under UK GDPR and receives additional protection.

Technical information

When you visit our website, we may collect technical information such as your IP address, browser type, device information and details about how you interact with our website, subject to applicable cookie and privacy requirements.

Communications

We may retain information you provide when contacting us through our website, email, telephone or social media channels.

4. How We Use Your Information

We use your personal information for the following purposes:

To respond to enquiries and appointment requests.
To manage bookings, cancellations and appointments.
To assess treatment suitability and support safe, appropriate care.
To maintain consultation, consent and treatment records.
To provide treatment instructions and aftercare information.
To process payments and manage refunds, where applicable.
To communicate important information about your appointments or treatments.
To improve our website, customer service and business operations.
To comply with legal, regulatory, insurance and professional obligations.
To protect our business, clients and staff against fraud or misuse.

We will only use your information for purposes that are lawful, fair and transparent.

5. Our Lawful Bases for Processing

Under UK GDPR, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Contract: Where processing is necessary to manage a booking or provide services you have requested.

Legal obligation: Where we need to retain or disclose information to comply with applicable laws or regulatory requirements.

Legitimate interests: Where processing is necessary for our legitimate business interests, such as managing enquiries, maintaining business records and improving our services, provided those interests do not override your rights.

Consent: Where you have given permission for a specific purpose, such as receiving certain marketing communications or allowing photographs to be used for promotional purposes.

Special category data: Where we process health information, we will also identify an applicable special category condition under Article 9 UK GDPR, and any additional condition required by applicable law. Depending on the circumstances, this may include your explicit consent or another applicable legal condition.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6. How We Protect Your Health Information

Your health and medical information is treated confidentially and is only accessed where reasonably necessary for providing treatment, maintaining appropriate records or meeting our legal and professional obligations.

We take appropriate technical and organisational measures to protect this information against unauthorised access, loss, alteration or disclosure.

We will not use your medical information for unrelated marketing purposes.

Please note that withdrawing consent for a particular use of your information does not necessarily mean we must delete clinical records that we are legally required to retain or need to keep for another lawful reason.

7. Photographs and Marketing

We may take photographs for clinical documentation, treatment monitoring or comparison of results before and after treatment.

Photographs will be handled confidentially and will not be published on our website, social media accounts, advertising materials or other promotional channels without an appropriate lawful basis and, where required, your specific consent.

Where photographs are used for promotional purposes, we will explain the intended use and seek your permission where required. We will not make promotional consent a condition of receiving treatment where it is not necessary.

You may withdraw your consent to future promotional use at any time. This will not retrospectively affect uses that were lawful before withdrawal, and it may not be possible to retrieve materials already distributed or shared by third parties.

8. Sharing Your Personal Information

We do not sell your personal information to third parties.

We may share relevant information with trusted third parties where necessary, including:

Appointment booking and practice management providers.
Payment processing providers.
Website hosting, maintenance and IT support providers.
Professional advisers, insurers and legal representatives.
Healthcare professionals or emergency services where appropriate for your care or safety.
Regulators, law enforcement agencies or other authorities where required or permitted by law.

Where third parties process information on our behalf, we take appropriate steps to ensure that suitable data protection arrangements are in place.

We only share information that is reasonably necessary for the relevant purpose.

9. How Long We Keep Your Information

We retain personal information only for as long as necessary for the purposes for which it was collected, including meeting legal, regulatory, insurance and record-keeping obligations.

The retention period will depend on the type of information, the nature of the treatment and any applicable legal or professional requirements.

For example, enquiry records, booking information, financial records and clinical treatment records may each require different retention periods.

When information is no longer required, we will take reasonable steps to securely delete it or anonymise it.

10. Cookies and Website Analytics

Our website may use cookies and similar technologies to ensure the website functions properly, remember preferences and understand how visitors use the site.

Where applicable, we may use analytics or other third-party technologies to improve website performance and user experience.

Non-essential cookies, including analytics or advertising cookies where consent is required, will only be used after you have provided the necessary consent. You can manage your preferences through our cookie banner or settings, where available.

You can also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

If our website uses third-party services, their own privacy and cookie policies may also apply.

11. Marketing Communications

We may send you marketing communications about our treatments, offers or services where we have a lawful basis to do so and have complied with applicable electronic marketing rules.

Where required, we will ask for your consent before sending marketing communications.

You can opt out of marketing emails by using the unsubscribe link or contacting us directly.

We may still send essential non-marketing communications, such as appointment confirmations, treatment-related information or important service updates.

12. Your Data Protection Rights

Under applicable data protection law, you may have the right to:

Access: Request a copy of the personal information we hold about you.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Request deletion of your personal information in certain circumstances.
Restriction: Ask us to restrict how we use your information in certain circumstances.
Data portability: Request certain information in a portable format where the legal conditions are met.
Object: Object to processing based on legitimate interests or to direct marketing.
Withdraw consent: Withdraw consent where processing is based on consent.

These rights are subject to legal conditions and exemptions. For example, we may need to retain certain treatment or financial records even where you request deletion.

To exercise your rights, please contact us using the details provided in Section 2.

We may need to verify your identity before responding to your request.

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.

ICO website: https://ico.org.uk/

13. Data Security

We take reasonable and appropriate steps to protect your personal information from loss, misuse, unauthorised access, alteration and disclosure.

These measures may include access controls, secure systems, password protection and appropriate safeguards when working with third-party service providers.

Although we take data security seriously, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

14. Third-Party Websites

Our website may contain links to third-party websites, including social media platforms, booking services or payment providers.

We are not responsible for the privacy practices, content or security of websites operated by third parties. We encourage you to read their privacy policies before providing personal information.

15. International Transfers

Some of our service providers may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take the steps required by applicable data protection law to ensure that appropriate safeguards are in place.

16. Children's Privacy

Our services are intended for individuals who meet the applicable age and eligibility requirements for the treatments offered.

We do not knowingly collect children's personal information through our website unless there is an appropriate lawful basis and the necessary safeguards are in place.

Where information relating to a child is required for a lawful purpose, we will handle it in accordance with applicable data protection and safeguarding requirements.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal obligations.

Any updates will be published on this page, together with a revised “Last updated” date.

We encourage you to review this page periodically.

18. Contact Us

If you have any questions about this Privacy Policy, how we handle your personal information or how to exercise your data protection rights, please contact:

Aesthetics by Claire
Business name: Aesthetics by Claire
Business owner: Claire Blaxill
Email address: info@aesthetics-by-claire.com
Telephone: 07359315660

We will endeavour to respond to all legitimate requests within the time limits required by applicable data protection law.

Privacy Policy

A legal disclaimer

1. Introduction

Welcome to Aesthetics by Claire. We are committed to protecting your privacy and ensuring that your personal information is handled safely, securely and responsibly.

This Privacy Policy explains how Aesthetics by Claire collects, uses, stores and protects your personal information when you visit our website, contact us, book an appointment or receive our aesthetic treatments.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or providing your personal information, you acknowledge that you have read this Privacy Policy.

2. Who We Are

Aesthetics by Claire is responsible for the personal information collected and processed in connection with our website and services.

Business name: Aesthetics by Claire Business owner: Claire Blaxill Business address: 25a High St, Chesham HP5 1BG Email address: info@aesthetics-by-claire.com Telephone: 07359315660 Website: https://www.aesthetics-by-claire.com/

For the purposes of data protection law, the business is the data controller of the personal information it collects, unless otherwise stated.

3. What Personal Information We Collect

We may collect and process the following categories of personal information:

Personal and contact information

Your name and surname.

Email address and telephone number.

Contact and appointment details.

Booking and treatment information

Appointment dates and times.

Treatment preferences and relevant booking history.

Payment status and transaction details, where applicable.

Health and medical information

Medical history relevant to your treatment.

Allergies, medications and existing medical conditions.

Skin concerns, contraindications and treatment suitability information.

Consultation forms, consent forms and relevant aftercare information.

Before-and-after photographs, where taken and appropriately authorised.

Health information is considered special category personal data under UK GDPR and receives additional protection.

Technical information

When you visit our website, we may collect technical information such as your IP address, browser type, device information and details about how you interact with our website, subject to applicable cookie and privacy requirements.

Communications

We may retain information you provide when contacting us through our website, email, telephone or social media channels.

4. How We Use Your Information

We use your personal information for the following purposes:

To respond to enquiries and appointment requests.

To manage bookings, cancellations and appointments.

To assess treatment suitability and support safe, appropriate care.

To maintain consultation, consent and treatment records.

To provide treatment instructions and aftercare information.

To process payments and manage refunds, where applicable.

To communicate important information about your appointments or treatments.

To improve our website, customer service and business operations.

To comply with legal, regulatory, insurance and professional obligations.

To protect our business, clients and staff against fraud or misuse.

We will only use your information for purposes that are lawful, fair and transparent.

5. Our Lawful Bases for Processing

Under UK GDPR, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Contract: Where processing is necessary to manage a booking or provide services you have requested.

Legal obligation: Where we need to retain or disclose information to comply with applicable laws or regulatory requirements.

Legitimate interests: Where processing is necessary for our legitimate business interests, such as managing enquiries, maintaining business records and improving our services, provided those interests do not override your rights.

Consent: Where you have given permission for a specific purpose, such as receiving certain marketing communications or allowing photographs to be used for promotional purposes.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6. How We Protect Your Health Information

Your health and medical information is treated confidentially and is only accessed where reasonably necessary for providing treatment, maintaining appropriate records or meeting our legal and professional obligations.

We take appropriate technical and organisational measures to protect this information against unauthorised access, loss, alteration or disclosure.

We will not use your medical information for unrelated marketing purposes.

Please note that withdrawing consent for a particular use of your information does not necessarily mean we must delete clinical records that we are legally required to retain or need to keep for another lawful reason.

7. Photographs and Marketing

We may take photographs for clinical documentation, treatment monitoring or comparison of results before and after treatment.

Photographs will be handled confidentially and will not be published on our website, social media accounts, advertising materials or other promotional channels without an appropriate lawful basis and, where required, your specific consent.

Where photographs are used for promotional purposes, we will explain the intended use and seek your permission where required. We will not make promotional consent a condition of receiving treatment where it is not necessary.

You may withdraw your consent to future promotional use at any time. This will not retrospectively affect uses that were lawful before withdrawal, and it may not be possible to retrieve materials already distributed or shared by third parties.

8. Sharing Your Personal Information

We do not sell your personal information to third parties.

We may share relevant information with trusted third parties where necessary, including:

Appointment booking and practice management providers.

Payment processing providers.

Website hosting, maintenance and IT support providers.

Professional advisers, insurers and legal representatives.

Healthcare professionals or emergency services where appropriate for your care or safety.

Regulators, law enforcement agencies or other authorities where required or permitted by law.

Where third parties process information on our behalf, we take appropriate steps to ensure that suitable data protection arrangements are in place.

We only share information that is reasonably necessary for the relevant purpose.

9. How Long We Keep Your Information

We retain personal information only for as long as necessary for the purposes for which it was collected, including meeting legal, regulatory, insurance and record-keeping obligations.

The retention period will depend on the type of information, the nature of the treatment and any applicable legal or professional requirements.

For example, enquiry records, booking information, financial records and clinical treatment records may each require different retention periods.

When information is no longer required, we will take reasonable steps to securely delete it or anonymise it.

10. Cookies and Website Analytics

Business name: Aesthetics by Claire
Business owner: Claire Blaxill
Business address: 25a High St, Chesham HP5 1BG
Email address: info@aesthetics-by-claire.com
Telephone: 07359315660
Website: https://www.aesthetics-by-claire.com/

Aesthetics by Claire
Business name: Aesthetics by Claire
Business owner: Claire Blaxill
Email address: info@aesthetics-by-claire.com
Telephone: 07359315660