Privacy Policy

Astral Aesthetics - 308 Leyland Lane, Leyland. PR25 1UL

Last updated: 1st May 2026

1. Who We Are

Astral Aesthetics is operated by Mrs Hazel Minion, a self-employed aesthetics practitioner based in the United Kingdom.

If you have any questions about this policy or how your data is handled, you can contact:
astralaesthetics00@gmail.com

2. What Information We Collect

We may collect and process the following personal data:

• Name, address, date of birth and contact details

• Medical history and health information (relevant to treatments)

• Consultation forms and treatment records

• Photographs (before/after images where consent is given)

• Booking and appointment details

• Payment and transaction information (processed securely via third-party providers)

• Website usage data (such as pages visited)

3. How Your Information Is Used

Your data is used to:

• Provide safe and appropriate treatments

• Carry out consultations and create treatment plans

• Maintain accurate treatment records

• Communicate with you about appointments and aftercare

• Process bookings and payments

• Improve services and client experience

• Meet legal and insurance requirements

We will only use your information where we have a lawful basis to do so.

4. Lawful Basis for Processing

Under the UK GDPR, we rely on:

• Consent – for example, for marketing or use of images

• Contractual necessity – to provide booked treatments

• Legal obligation – for record keeping and insurance

• Legitimate interests – to manage and improve the business

Health-related data is treated as special category data and handled with additional care.

5. Sharing Your Information

Your data may be shared with:

• Booking and client management systems (e.g. Ovatu or similar)

• Payment providers (e.g. Stripe or card processors)

• Insurance providers if required

• Regulatory or legal authorities if required by law

We do not sell or share your data for third-party marketing.

6. Data Storage and Security

Your information is stored securely using password-protected systems and secure platforms.

We take appropriate steps to protect your data from unauthorised access, loss, or misuse.

7. How Long We Keep Your Data

Client records are typically retained for a minimum of 7 years in line with insurance and legal requirements.

After this period, data will be securely deleted.

8. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion (where legally possible)

• Restrict or object to processing

• Withdraw consent at any time

• Lodge a complaint with the Information Commissioner's Office (ICO) who we are registered with

9. Cookies and Website Data

This website (built using Google Sites) may collect basic usage data such as page visits.

Cookies may be used to improve your browsing experience. You can control cookies through your browser settings.

10. Marketing Communications

If you choose to subscribe or opt in, you may receive updates, offers, or educational content.

You can unsubscribe at any time by contacting us or using the unsubscribe link where provided.

11. Changes to This Policy

This privacy policy may be updated from time to time. The latest version will always be available on this page.

By using this website or submitting your information, you agree to the terms of this privacy policy.