Privacy Notice

Data Controller and Contact Information

This Privacy Policy outlines the ways in which we, Aesthetic Health Solutions UK, collect, process, and protect your personal data. We are committed to safeguarding the privacy of visitors to our website and users of our services. As the data controller, Elara Windom, located at 318 Queen Street, Auckland CBD, Auckland 1010, New Zealand, is responsible for the protection of personal data. You can contact us regarding any privacy-related issues by emailing [email protected]. We adhere to the data protection laws applicable in the United Kingdom, ensuring compliance with the General Data Protection Regulation (GDPR) and any other relevant legislation.

Information We Collect

We collect various types of information about you or your device when you visit our website or use our services. This may include personal information that can identify you, such as your name, email address, and postal address. We also collect non-personal information, which may include your IP address, browser type, and device information. This data is collected through cookies and related technologies to enhance your experience on our platform. Detailed information might be gathered from communications and interactions, such as emails and customer service queries, ensuring we provide you with optimal service and resolve any issues efficiently.

How We Use Your Information

Your personal information is used to deliver and improve our services, respond to your inquiries, and communicate with you in connection with our services. We may use your data to customize or enhance your experience on our platform, conduct research and analysis, and monitor usage patterns to protect against fraudulent activities. Your data is crucial for us to send notifications and marketing communications with your consent, or when applicable, under legitimate interests as defined by the law. We ensure all usage of personal information aligns with the principles outlined in this Privacy Policy, and that usage complies with the legitimate interests pursued by our business activities.

Sharing Your Information

We may share your personal information with third parties in limited scenarios such as when we are required to by law, or to protect our legal rights, or when we work with service providers who assist us in conducting business. All third-party service providers are carefully selected and bound by contractual obligations to safeguard your personal data and use it only for the purposes we've specified. We do not sell, trade, or rent your information to unaffiliated parties for marketing purposes without your explicit consent. When necessary, with your consent or as permitted by applicable laws, data may be shared with partners who offer products or services that we believe may be of interest to you. This ensures a tailored approach to your needs, reflecting our commitment to offering a seamless experience while maintaining your privacy.

Your Rights

You have the right to access the personal data we hold about you and request its correction, deletion, or restriction at any time. You can object to the processing of your data, especially regarding direct marketing and profiling in connection with any automated decision-making technologies. We encourage you to contact us if you feel your rights are being violated so we can address your concerns swiftly. We take customer satisfaction and legal compliance seriously, thus we provide you with clear procedures on how to exercise your rights. In certain circumstances, you may also have the right to data portability, allowing you to obtain and reuse your data across different services. Additionally, you can withdraw consent where provided, with future effect, ensuring an empowered stance over your personal data.

Data Security

We ensure the security and integrity of your personal data through organizational and technical security measures that reflect the sensitivity of the data we hold. These measures include restricted access to personal data, encryption technologies, and regular system monitoring for potential vulnerabilities or risks. We conduct routine security audits and maintain a network of security protocols to protect your personal information against unauthorized access, alterations, or destruction. Staff members are thoroughly trained in handling sensitive information to uphold our strict data protection policies, and any breach is dealt with according to our established response plans. While we strive to use commercially acceptable means, such as firewalls and data encryption, to protect your personal data to the best extent possible, no method of transmission or electronic storage is 100% secure.