Privacy Policy
Who We Are
Wharf Aesthetics Ltd is a UK-based aesthetics business providing skin, hair and wellness treatments.
If you have any questions about this policy or how your data is handled, please contact:
Email: wharfaestheticsltd@gmail.com
What Information We Collect
We may collect and process personal data including your name, contact details, date of birth, medical history, treatment records, and appointment details.
We may also collect before and after photographs (with your consent), as well as website usage data such as IP address and browser type.
Health & Sensitive Data
As part of providing treatments, we collect health-related information such as medical history, medications, and allergies.
This is classified as special category data under UK GDPR and is handled with strict confidentiality and care.
How We Use Your Information
Your data is used to provide safe and appropriate treatments, manage bookings, communicate with you, maintain accurate records, and improve our services.
We will never sell your data.
Legal Basis for Processing
We process your data under the following legal bases:
-
Consent (for health data, photos, and marketing)
-
Contract (to provide treatments)
-
Legal obligation (record keeping)
-
Legitimate interest (business operations)
How Your Data Is Stored
Your data may be securely stored using trusted platforms including:
-
Wix (website and booking forms)
-
Google Calendar (appointments)
-
Faces (consultation forms, treatment records, and images)
These platforms use appropriate security and GDPR-compliant measures.
Data Sharing
We only share your data where necessary, including with secure software providers and payment processors.
We do not share your data with third parties for marketing purposes.
Data Retention
We retain your data only as long as necessary.
Treatment records are typically kept for up to 7 years in line with industry standards and legal requirements.
Your Rights
You have the right to access, correct, or request deletion of your data, as well as withdraw consent at any time.
To exercise your rights, please contact us directly.
Photography & Consent
Before and after photographs are taken as standard as part of clinical record keeping, treatment planning, and to support safe and effective practice.
These images form part of your confidential medical-style records and are stored securely.
Use of images for marketing or social media is entirely optional and will only take place with your explicit written consent. This is discussed with you during your consultation, and you are free to decline without any impact on your treatment.
If you consent to images being used for marketing and later change your mind, you can contact us at any time and the content will be removed where possible.
Cookies
Our website may use cookies to improve your experience and analyse website traffic.
You can control cookie settings through your browser.
Data Security
We take appropriate steps to protect your data, including secure systems, restricted access, and encrypted platforms where applicable.
Updates to This Policy
This Privacy Policy may be updated from time to time. The latest version will always be available on our website.
Complaints
If you have any questions or concerns about how your data is handled, please contact us directly and we will do our best to resolve the issue promptly.\
If you remain unhappy with how your data has been handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk