UK GDPR Compliance
Aesthetic Health Solutions UK is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with the law and how you can exercise your rights as a data subject.
Scope and Applicability
This compliance page applies to all visitors of amc-aesthetics.co.uk. While we do not collect personal data through user registration or account creation, we may process limited personal data automatically through website analytics, cookies, and server logs. This includes IP addresses, browser types, and usage patterns for the purpose of improving site functionality and user experience.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access – You may request confirmation of whether we process your personal data and obtain a copy of it.
- Right to rectification – You may request correction of inaccurate or incomplete personal data.
- Right to erasure – You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restriction of processing – You may request we limit how we use your data under certain conditions.
- Right to data portability – You may request your data in a structured, commonly used, and machine-readable format.
- Right to object – You may object to processing based on legitimate interests, including profiling and direct marketing.
How We Comply
We do not store personal data in databases or user profiles. Any data collected via cookies or analytics tools is processed anonymously or pseudonymised where possible. We use only essential and analytical cookies with user consent, and we do not sell or share personal data with third parties for commercial purposes. Our website is hosted on secure servers with appropriate technical and organisational measures to protect data.
Data We Process
Where applicable, the personal data we may process includes:
- IP addresses (anonymised where feasible)
- Cookie identifiers
- Browser and device information
- Pages visited and time spent on site
This data is collected solely for website optimisation and is not linked to identifiable individuals beyond what is necessary for security and analytics.
Legal Basis for Processing
Our processing of personal data is based on legitimate interest under Article 6(1)(f) of the UK GDPR, specifically to ensure the proper functioning of our website, improve user experience, and maintain security. Where required, we obtain explicit consent for non-essential cookies.
How to Exercise Your Rights
To exercise any of your rights under the UK GDPR, please contact us via email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or cookie identifier if known). We will respond without undue delay.
Response Timeframes
We aim to respond to all requests within one month of receipt. If your request is complex or numerous, we may extend this period by a further two months and will inform you accordingly.
No Discrimination Policy
You will not be denied access to our services, charged different prices, or receive a different level of service because you exercised your rights under the UK GDPR.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. The latest version will always be available here, and we will notify users of material changes via a notice on our homepage.
Contact Information
If you have any questions about this compliance page or wish to exercise your rights, please contact:
Elara Windom
318 Queen Street, Auckland CBD, Auckland 1010, New Zealand
Email: [email protected]
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe your rights have been infringed.