Privacy Policy

Last updated: 17th September 2026

Aesthetics by Amber respects your privacy and is committed to protecting the personal information collected through this website.

This privacy policy explains how we collect, use and protect personal information when you visit www.aestheticsbyamber.co.uk, contact us through the website or use links to third party services.

This policy applies specifically to the website. Separate information may be provided when you book or receive a treatment, particularly where medical information or treatment records are collected.

1. Who we are

For the purposes of UK data protection law, Aesthetics by Amber is the controller of personal information collected directly through this website.

If you have any questions about this privacy policy or how your personal information is handled, please contact:

Email: info@aestheticsbyamber.co.uk
Website: www.aestheticsbyamber.co.uk

2. Information we may collect

Depending on how you use the website, we may collect the following information:

• Your name

• Your email address

• Your telephone number

• Information included in an enquiry or message

• Appointment or treatment preferences

• Communications you send to us

• Your IP address

• Your browser, device type and operating system

• Information about how you use and navigate the website

• Your cookie and consent preferences

• The website or search engine that referred you to us

Please avoid including unnecessary medical or sensitive information in a general website enquiry.

If you use an external booking or consultation platform, you may be asked to provide information about your health, medical history, allergies, medication or previous treatments. Health information is classed as special category personal data and requires additional protection.

3. How we collect your information

We may collect personal information when you:

• Submit an enquiry through the website

• Contact us using the email address or telephone number displayed on the website

• Use the website’s chat or WhatsApp feature

• Follow a link to book an appointment

• Accept or manage cookies

• Browse or interact with the website

Some technical information may be collected automatically through cookies, analytics tools, security software and server logs.

4. How we use your information

We may use personal information collected through the website to:

• Respond to enquiries

• Provide information about treatments and services

• Help you arrange or manage an appointment

• Communicate with you about an enquiry or booking

• Provide requested follow up information

• Operate, maintain and secure the website

• Identify and prevent spam, fraud or misuse

• Understand how visitors use the website

• Improve the website and user experience

• Maintain records where reasonably necessary

• Comply with legal and regulatory obligations

• Establish, exercise or defend legal claims

We will only use your personal information for the purpose for which it was collected, unless we reasonably consider that it needs to be used for a compatible purpose.

5. Our lawful bases

Under the UK General Data Protection Regulation, we must have a lawful basis for using your personal information. Depending on the circumstances, we may rely on:

Consent

Where you have actively agreed to a particular use of your information, such as accepting optional cookies or choosing to receive marketing communications.

Contract

Where processing is necessary to take steps at your request before entering into a contract or to provide a service you have requested.

Legitimate interests

Where it is reasonably necessary to respond to enquiries, operate and improve the website, protect the website against misuse or support the administration of our services. We will balance these interests against your rights and freedoms.

Legal obligation

Where we need to process information to comply with a legal or regulatory requirement.

Legal claims

Where information is required to establish, exercise or defend a legal claim.

Where health information or other special category data is processed, an additional condition under UK data protection law will also be required. Depending on the circumstances, this may include your explicit consent, the provision of health treatment by an appropriately qualified professional or the establishment, exercise or defence of legal claims.

6. Appointment bookings and third party services

The website may contain links to external services, including appointment booking, consultation, consent, messaging, map or social media platforms.

For example, the “Book Now” button may take you to the Faces Consent platform. Information entered into an external platform is processed according to that provider’s own privacy policy and terms. The provider may act as an independent controller or as a processor acting on our behalf, depending on the service and circumstances.

You should review the privacy information provided by the relevant service before submitting personal information.

This website may also provide a WhatsApp or similar chat facility. If you choose to contact us through such a service, the service provider may process information about your account, device and communication. You should avoid sharing unnecessary medical or sensitive information through an informal messaging service.

We are not responsible for the privacy practices or content of third party websites that operate independently from us.

7. Cookies

Cookies are small text files stored on your device when you visit a website. They can help the website function correctly, remember preferences, measure website usage and support embedded services.

The website may use:

Strictly necessary cookies

These cookies are required for essential website functions, security and remembering your cookie preferences. They do not normally require consent.

Analytics cookies

These cookies help us understand how visitors find and use the website. Where consent is required, they will only be activated after you have accepted them.

Functionality cookies

These cookies support additional website features, such as chat tools, embedded content or appointment booking functions.

Marketing cookies

These cookies may be used to measure advertising performance or provide more relevant advertising. They will only be used where you have provided the required consent.

When you first visit the website, you will be given the opportunity to accept or reject nonessential cookies. You can change your preferences through the cookie banner or your browser settings.

Blocking some cookies may affect how certain parts of the website function.

8. Analytics and technical information

Subject to your cookie choices, analytics services may collect information about how the website is used. This may include pages visited, time spent on the website, approximate location, device information and the source of the visit.

We use this information to understand website performance and improve its content and usability. Where possible, analytics information is reviewed in an aggregated form rather than being used to identify individual visitors.

9. Marketing communications

We will only send electronic marketing communications where we have a valid lawful basis to do so.

Where marketing relies on your consent, you may withdraw that consent at any time by following the unsubscribe instructions in the communication or emailing info@aestheticsbyamber.co.uk.

Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.

We do not sell your personal information to third parties for marketing purposes.

10. Who we may share information with

Where necessary, personal information may be shared with carefully selected organisations that help us operate the website or provide the requested service. These may include:

• Website hosting and maintenance providers

• Website security and backup providers

• Email and communication providers

• Appointment booking and consent platforms

• Analytics providers

• Professional advisers, including legal or accountancy advisers

• Regulators, authorities or law enforcement bodies where required by law

• A purchaser, successor or adviser involved in a genuine business reorganisation

Service providers acting on our behalf are only permitted to use personal information for the agreed purpose and must protect it appropriately.

11. International transfers

Some website service providers may store or process information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate safeguard is in place. This may include transferring information to a country recognised as providing adequate protection or using approved contractual protections.

Further information about safeguards used for a particular service may be requested by contacting us.

12. How long we keep information

We will only retain personal information for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry and meeting legal, regulatory, accounting or reporting requirements.

The appropriate retention period will depend on:

• The nature and sensitivity of the information

• The reason it was collected

• Whether an ongoing relationship exists

• Applicable legal or professional requirements

• The risk of harm from unauthorised use or disclosure

• Whether the purpose can be achieved in another way

General enquiries that do not result in a booking or ongoing relationship will normally be deleted when they are no longer required. Website security logs and analytics information may be retained for shorter or longer periods depending on the service used and applicable settings.

Treatment records and medical information collected outside the general website may be subject to separate professional or legal retention requirements.

13. How we protect your information

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

These measures may include secure website connections, restricted access, security monitoring, software updates, password protection and reputable service providers.

However, no online system or method of transmission can be guaranteed to be completely secure. You are responsible for taking reasonable care when sending information online.

14. Your data protection rights

Depending on the circumstances, you may have the right to:

• Request access to the personal information held about you

• Ask for inaccurate or incomplete information to be corrected

• Request the deletion of your personal information

• Ask for the use of your information to be restricted

• Object to certain uses of your personal information

• Request a copy of information in a portable format

• Withdraw consent where processing relies on consent

• Ask about safeguards used for international transfers

• Complain about how your information has been handled

Some rights are subject to legal conditions and exemptions.

To exercise a right, please email info@aestheticsbyamber.co.uk. We may need to request additional information to confirm your identity before responding.

We will normally respond within one month, although additional time may be permitted for particularly complex requests.

15. Complaints

If you are concerned about how your personal information has been handled, please contact us first so we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk

16. Children’s information

The website and services are not intended to collect information directly from children without the involvement of a parent or guardian.

If you believe that a child has provided personal information through the website without appropriate permission, please contact us so the information can be reviewed and, where appropriate, deleted.

17. External links

The website may contain links to other websites and online platforms. Following one of these links may allow the third party to collect or share information about you.

We do not control independent third party websites and are not responsible for their privacy practices. You should read the privacy policy of each external website you visit.

18. Changes to this policy

We may update this privacy policy when the website, services or legal requirements change.

The latest version will be published on this page and the “last updated” date will be amended accordingly. We recommend reviewing this policy periodically.