1. Who We Are

Aesthetic Boutique is responsible for the personal information collected through this website and in connection with our services.

Aesthetic Boutique, 134 Fore Street, Exeter EX4 3AN

Email: aestheticboutique.uk@gmail.com

For the purposes of UK data protection law, Aesthetic Boutique is the data controller for the personal information we hold about you.

2. Information We May Collect

Depending on how you interact with Aesthetic Boutique, we may collect information including:

Contact Information

* Name

* Email address

* Telephone number

* Information you provide when contacting us

Appointment Information

* Appointment date and time

* Consultation and treatment history

* Booking information

* Treatment preferences

Treatment & Medical Information

Where necessary to provide treatment safely, we may collect relevant information such as:

* Medical history

* Current or recent medication

* Allergies

* Relevant medical conditions

* Previous aesthetic treatments

* Information relevant to treatment suitability

* Treatment and aftercare records

This information may include special category personal data, including health information, which is handled with additional care and in accordance with applicable UK data protection legislation.

Website Information

We may also collect technical information when you use our website, such as:

* IP address

* Browser type

* Device information

* Pages visited

* General website usage information

Some of this information may be collected through cookies or similar technologies. Further information is provided in our Cookie Policy.

3. How We Use Your Information

We may use your information to:

* Respond to enquiries

* Arrange and manage appointments

* Conduct consultations

* Assess treatment suitability

* Provide treatments safely

* Maintain appropriate treatment records

* Provide aftercare and follow-up

* Process payments

* Communicate with you about appointments

* Respond to questions or concerns

* Improve our services and website

* Meet legal, regulatory and professional obligations

* Protect the safety and security of our clients and business

We will only use your personal information where we have an appropriate lawful basis for doing so.

4. Health Information

Information relating to your health and medical history may be necessary to assess your suitability for treatment and provide treatment safely.

Health information is treated as special category data under UK data protection law.

We will only collect and use health information where there is an appropriate lawful basis and special category condition under applicable UK data protection legislation.

You should provide accurate and complete information relevant to your treatment.

If you do not provide information that is necessary to assess your suitability or provide treatment safely, we may be unable to proceed with treatment.

5. How We Obtain Your Information

We may receive personal information directly from you when you:

* Complete a consultation or consent form

* Book an appointment

* Contact us by email, telephone or social media

* Submit information through our website

* Attend an appointment

* Communicate with us before or after treatment

We may also receive limited information from third-party services used to manage appointments, payments or other aspects of our business.

These services may include appointment and booking platforms such as Fresha, where used by Aesthetic Boutique.

6. Sharing Your Information

We do not sell your personal information.

We may share relevant information with trusted third parties where this is necessary to operate our business, provide services to you or meet our legal and professional obligations.

Depending on the services we use, these may include:

* Fresha or another appointment and booking platform

* Payment providers

* Website hosting and technical service providers

* Email and communication providers

* Professional advisers

* Insurers

* Relevant healthcare professionals where appropriate and lawful

* Regulators, authorities or law enforcement where legally required

Only information that is reasonably necessary for the relevant purpose will be shared.

Where third-party providers process personal information on our behalf, we expect them to maintain appropriate security and comply with applicable data protection requirements.

7. Email & Communications

We may use your email address and other contact details to communicate with you about:

* Consultations and appointments

* Treatment information

* Aftercare and follow-up

* Responses to enquiries

* Changes affecting your appointment or services

Where appropriate and where we have a lawful basis to do so, we may also send information about Aesthetic Boutique’s treatments, services or offers.

You can opt out of marketing communications at any time.

Essential communications relating to appointments, treatments or services may still be sent where necessary.

8. Photographs

Photographs may be taken as part of your treatment records where clinically appropriate.

Clinical photographs may be used to document treatment, monitor progress and assist with appropriate follow-up.

Photographs will not be used for marketing, advertising or social media purposes without appropriate consent.

Where you agree to the use of photographs for promotional purposes, you may withdraw that consent for future use.

9. How We Protect Your Information

We take reasonable and appropriate technical and organisational measures to protect personal information against:

* Unauthorised access

* Accidental loss

* Destruction

* Misuse

* Alteration

* Unauthorised disclosure

Access to information is limited to those who need it for legitimate business or treatment purposes.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

10. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing treatment, maintaining appropriate records and meeting legal, regulatory, professional, insurance and accounting requirements.

Different types of information may therefore be retained for different periods.

When information is no longer required, it will be securely deleted or disposed of where appropriate.

11. Your Data Protection Rights

Under UK data protection law, you may have rights including:

* The right to be informed about how your information is used

* The right to request access to your personal information

* The right to request correction of inaccurate information

* The right to request deletion in certain circumstances

* The right to restrict processing in certain circumstances

* The right to object to certain processing

* The right to data portability in certain circumstances

* The right to withdraw consent where processing is based on consent

These rights are subject to certain legal exceptions and limitations.

If you would like to exercise a data protection right, please contact us.

12. Cookies

Our website may use cookies and similar technologies to help the website function, understand how visitors use the site and improve the user experience.

Some cookies may be placed by third-party services.

Please see our Cookie Policy for further information about the cookies we use and how you can manage them.

13. Third-Party Websites

Our website may contain links to third-party websites, including social media platforms, booking services or other websites.

We are not responsible for the privacy practices or content of third-party websites.

We recommend reviewing the privacy policy of any third-party website you visit.

14. Children

Our services are not generally directed towards children.

We do not knowingly collect personal information from children except where appropriate and lawful in connection with a service we provide.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal requirements.

The latest version will be published on this page with the relevant date.

16. Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we have an opportunity to address your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

You can find information about making a complaint on the ICO website.

17. Contact Us

If you have questions about this Privacy Policy or how your personal information is handled, please contact:

Aesthetic Boutique

134 Fore Street

Exeter

EX4 3AN

Email: aestheticboutique.uk@gmail.com

Consultations are strictly by appointment.

Privacy Policy

Aesthetic Boutique - Last updated: September 2026

Aesthetic Boutique respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, book a consultation or receive treatment from us.