Privacy policy for Elemental Aesthetics.

Effective Date: 03 May 2025

This Privacy Policy applies to Elemental Aesthetics (“we”, “us”, “our”) of 19 The Orchards, Cambridge, CB1 9HD, and governs the collection, use, and disclosure of personal data (“Personal Data”) that we process in connection with our website, booking system, email communications, social media interactions, and in‑person services.

1. Definitions & Data Controller

We act as the data controller under UK GDPR. "Personal Data" means any information that identifies you directly or indirectly.

2. What Data We Collect

We may collect:

  • Personal Data you provide: e.g., name, date of birth, contact details (email, phone), medical history, treatment preferences (typical for aesthetic clinics).

  • Automatically collected data: e.g., IP address, browser type, login times, website usage via cookies & analytics tools.

3. How We Collect Your Data

  • Directly from you: booking forms, emails, consultations, online forms.

  • Automatically: via cookies, Google Analytics or similar when you browse our website.

4. Purposes of Data Processing & Legal Bases

We use your data to:

  • Provide and manage treatments and appointments (performance of a contract).

  • Maintain records for medical and billing purposes.

  • Improve our services and website functionality (legitimate interests).

  • Send relevant marketing (only with opt‑in consent or soft opt‑in when you’ve previously engaged with us).

5. Cookies & Tracking

We use cookies and similar technologies to understand site usage, enable features, and improve your experience. You may disable cookies via browser settings, though this may impact site functionality.

6. How We Share Your Data

We may share Personal Data with:

  • Our staff, advisors or consultants (e.g., legal, medical suppliers).

  • Service providers (e.g., booking platforms, analytics, IT hosting).

  • Authorities or third parties if legally required (e.g. in response to legal requests).

7. Data Retention

We retain data for as long as necessary to fulfil the relevant processing purposes or legal obligations. Backup data may be retained for longer for regulatory compliance.

8. Your Rights

Under UK GDPR, you have:

  • Request access to data we hold

  • Correct inaccurate information

  • Erase your data ("right to be forgotten")

  • Restrict or object to processing

  • Port your data to another provider

  • Withdraw marketing consent at any time

If you have concerns, you may contact the UK Information Commissioner’s Office (ICO).

9. International Transfers

If any data is transferred outside the UK (e.g., to overseas service providers), we ensure lawful safeguards are in place, such as standard contractual clauses.

10. Security

We implement technical, administrative and organisational measures to protect your data. While no system can guarantee absolute security, we take commercially reasonable steps to minimise risk.

11. Children

Our services are intended for adult users. We do not knowingly collect data from children under 13.

12. Links to Other Sites

Our website may contain links to third‑party websites (e.g. social media, partner sites). We are not responsible for their privacy practices and encourage you to review their own policies.

13. Changes to This Policy

We may update this policy as needed to comply with legal changes or service improvements. Any changes will be posted on our website with a new effective date. Continued use of our services constitutes acceptance.

14. Contact Us

For questions or exercising any rights, please contact us at:

Email: arwa@elementalaesthetics.co.uk

Address: Elemental Aesthetics Ltd, 19 The Orchards, Cambridge, CB1 9HD