Privacy Policy

Effective Date: 29/06/2026
Business Name: Aesthetology
Data Controller: Hayley Fox
Location: Guernsey

1. Introduction

Aesthetology is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information in accordance with The Data Protection (Bailiwick of Guernsey) Law, 2017.

By using our website, booking appointments, or receiving treatments from us, you agree to the collection and use of your information as described in this Privacy Policy.

2. Data Controller

For the purposes of data protection law, the data controller is:

Aesthetology
Hayley Fox
Guernsey
Email: info@aestheology.co.uk
Phone: 07781 118330

3. Information We Collect

We may collect and process the following categories of personal data:

a) Personal Information

  • Full name

  • Email address

  • Telephone number

  • Address (where required)

  • Date of birth (where required for treatment suitability)

b) Special Category Data (Health Information)

Due to the nature of aesthetic treatments, we collect:

  • Medical history

  • Current medications

  • Allergies

  • Skin conditions and concerns

  • Treatment records

  • Consultation notes

  • Before and after photographs (where applicable)

c) Payment Information

  • Payment and transaction details

All payments are processed securely through approved third-party payment providers. Aesthetology does not store full card details.

d) Website and Technical Information

When you visit our website, we may collect:

  • IP address

  • Device information

  • Browser type

  • Website usage information

  • Cookie data

  • Analytics information

e) Website Enquiries

If you submit an enquiry through our website, we collect the information you provide to:

  • Respond to your enquiry

  • Arrange consultations

  • Manage bookings

  • Provide information about our services

4. How We Use Your Data

We use your personal information to:

  • Provide safe and appropriate treatments

  • Assess treatment suitability

  • Maintain accurate treatment records

  • Manage consultations, bookings and appointments

  • Process payments

  • Communicate regarding appointments and aftercare

  • Comply with legal, insurance and regulatory obligations

  • Improve our services and website

  • Respond to enquiries

  • Send marketing communications where consent has been provided

5. Legal Basis for Processing

Under Guernsey data protection law, we rely on the following lawful bases:

Consent

For:

  • Marketing communications

  • Use of photographs for marketing purposes

  • Collection and processing of certain health information where required

Contract

To:

  • Provide consultations and treatments

  • Manage appointments and payments

Legal Obligation

To:

  • Maintain financial records

  • Meet legal and regulatory requirements

  • Comply with insurance obligations

Legitimate Interests

To:

  • Operate and improve our business

  • Protect clients and the business from fraud or misuse

  • Improve customer experience

6. Special Category (Health) Data

We process health-related information because it is necessary to:

  • Provide safe and effective treatments

  • Assess treatment suitability

  • Meet professional obligations

  • Meet insurance requirements

This information is:

  • Collected only where necessary

  • Kept confidential

  • Stored securely

  • Accessed only by authorised persons

We will not share your health information without your consent unless required by law or necessary to protect your vital interests.

7. Payments and Booking Policy

To secure appointments and reduce missed sessions, payment may be required at the time of booking.

Payments are processed securely through trusted third-party providers. Aesthetology does not retain full payment card details.

8. Sharing Your Data

We may share your personal information with:

  • Payment service providers

  • Booking and client management systems

  • Insurance providers where necessary

  • Professional advisers

  • Regulatory, legal or governmental authorities where required by law

We do not sell, rent or trade your personal data to third parties.

9. International Data Transfers

Some of the third-party providers we use (such as booking systems, payment processors, email providers or cloud storage services) may store or process data outside Guernsey.

Where personal data is transferred internationally, we take appropriate steps to ensure that suitable safeguards are in place to protect your information in accordance with applicable data protection laws.

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

This may include:

  • Treatment records: a minimum of 7 years after your last treatment, or longer where required by insurers, legal obligations or professional standards

  • Financial records: as required by applicable law

  • Marketing records: until consent is withdrawn

When information is no longer required, it will be securely deleted or destroyed.

11. Data Security

We take appropriate technical and organisational measures to protect your personal information, including:

  • Secure digital systems

  • Password-protected devices

  • Restricted access to client records

  • Secure cloud storage where applicable

  • Encrypted payment processing systems

While we take reasonable precautions, no method of transmission over the internet can be guaranteed to be completely secure.

12. Your Rights

Under Guernsey data protection law, you have the right to:

  • Access your personal data

  • Request correction of inaccurate information

  • Request deletion of your data where applicable

  • Restrict processing

  • Object to processing

  • Withdraw consent at any time where processing is based on consent

  • Request a copy of your personal information in a portable format where applicable

To exercise any of these rights, please contact us using the details below.

You also have the right to make a complaint to the:

Office of the Data Protection Authority (ODPA)

Telephone: 01481 724074
Website: ODPA Guernsey
Email: info@odpa.gg

13. Cookies

Our website uses cookies and similar technologies to:

  • Ensure website functionality

  • Improve user experience

  • Analyse website performance and traffic

  • Support marketing and advertising activities

Where required, we will obtain your consent before placing non-essential cookies on your device.

You can manage cookie preferences through your browser settings.

14. Marketing Communications

With your consent, we may send:

  • Promotional offers

  • Treatment updates

  • Skincare advice

  • News about services and events

You may withdraw your consent or unsubscribe from marketing communications at any time by:

  • Clicking the unsubscribe link in marketing emails; or

  • Contacting us directly.

15. Third-Party Services

We use trusted third-party providers to help operate our business, including booking systems, payment providers, email services and website hosting providers.

These providers process personal information only where necessary and are required to maintain appropriate security and confidentiality standards.

16. Treatment Photography

Before and after photographs may be taken as part of your clinical records.

These photographs:

  • Are stored securely

  • Form part of your treatment record

  • Are used to assess treatment progress and outcomes

Photographs will only be used for marketing, educational, training, social media or website purposes where you have provided separate explicit written consent.

You may withdraw this consent at any time, although this will not affect any use already made with your permission.

17. Children's Privacy

Aesthetology's treatments are intended for individuals aged 18 years and over.

We do not knowingly collect personal information from children under the age of 18.

18. Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate action and notify the relevant authorities where required by law.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices or services.

The latest version will always be available on our website.

20. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Aesthetology
Hayley Fox

1 Quay Steps ,St Peter Port
Guernsey GY1 1ZD
Email: info@aesthetology.co.uk
Phone: 07781 118330

Last Updated: 29/06/2026