Privacy Policy

1. Who we are
The Aeon Aesthetics Ltd is the controller of your personal data. Address: 12 Bath Road, First Floor, Hounslow TW3 3EB. Email: info@theaeonaesthetics.com. Data protection enquiries: dpo@theaeonaesthetics.com. Company number: 15942480 (registered in England and Wales; registered office 20 Wenlock Road, London N1 7GU).

ICO registration number: ZB917399

2. Data we collect
Contact and identity details: name, email, phone number, date of birth and, where required for age checks, photo ID details.
Booking and payment details: appointments, deposits, payments and transaction records (card details are handled by our payment providers, not stored by us).
Health information: medical history, allergies, medication, skin conditions, pregnancy and patch-test results from our consultation and intake forms.
Parent or guardian details for clients under 18.
Photographs: before-and-after photos of the treated area.
Website data: cookies and usage information (see our Cookies Policy), and communications you send us.

3. Why we use it and our lawful bases
To provide and manage bookings and treatments, take payments and send reminders: performance of a contract (Article 6(1)(b)).
Health information, so we can treat you safely: your explicit consent (Article 9(2)(a)), alongside contract (Article 6(1)(b)). You can withdraw consent at any time, but we may then be unable to treat you.
Keeping records for accounting, tax and age verification: legal obligation (Article 6(1)(c)).
Handling enquiries, complaints and improving our services and website: our legitimate interests (Article 6(1)(f)).
Marketing emails and using photos for marketing: your consent (Article 6(1)(a)), which you can withdraw at any time by using the unsubscribe link or emailing marketing@theaeonaesthetics.com.
Non-essential cookies: your consent, as described in our Cookies Policy.

Our lawful basis for using your information

We use your details to book and provide your treatment (contract, UK GDPR Article 6(1)(b)) and to keep the records our special treatment licence requires (legal obligation, Article 6(1)(c)). Health information in your consultation and consent forms is special category data. We only collect it with your explicit consent (Article 9(2)(a)), and we keep it after treatment where needed to establish or defend legal claims (Article 9(2)(f)). Marketing messages and use of your photos are optional and only with your separate consent, which you can withdraw at any time.

4. Who we share it with
We use trusted processors who act on our instructions:
Wix.com Ltd and its group: website hosting, bookings, forms, member area and email.
Google (Google Ireland Ltd / Google LLC): email, storage and, with your consent, analytics.
Payment providers (such as Wix Payments, Stripe and PayPal, as shown at checkout): processing payments.
We may also share data where required by law, with our professional advisers and insurers, or with medical services in an emergency. We never sell your data.

5. International transfers
Some processors may store data outside the UK. Where they do, transfers are protected by UK adequacy regulations (including the UK-US Data Bridge) or the UK International Data Transfer Agreement/Addendum.

6. How long we keep it
We keep consent forms, health questionnaires and ID copies for 6 years after your last treatment, as required by our local licensing conditions, and then securely delete them.
Financial records: 6 years from the end of the financial year, as required by HMRC.
Enquiries with no booking: up to 12 months.
Marketing consent records: until you withdraw consent, plus 2 years.
Cookies: as set out in our Cookies Policy.

7. Your rights
You have the right to access your data; to have it corrected; to have it erased; to restrict or object to processing; to data portability; and to withdraw consent at any time. To use your rights, email our Data Protection Officer at dpo@theaeonaesthetics.com. We will respond within one month.

8. Security
We use access controls and secure, encrypted systems provided by our processors. Paper consultation forms, if any, are kept locked away.

9. Complaints
If you are unhappy with how we use your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

10. Changes
We will update this page if the way we use your data changes. The "Last updated" date shows when it was last revised.