Privacy Policy

This policy explains how Aesthet collects, uses and protects your personal data when you use our platform to find, book, or offer aesthetics treatments in London. It applies to patients, practitioners, and anyone else who uses the site.

Aesthet is the data controller for the personal data described in this policy. If you have any questions or want to exercise any of the rights described below, contact us at privacy@aesthet.co.uk.

What we collect

Depending on how you use Aesthet, we collect:

• Account details: your name, email address, and a securely hashed version of your password (we don't store your actual password).
• Booking details: the service and time you book, its price, and any notes you choose to add for the practitioner.
• Practitioner details: for practitioners, this includes your qualifications, professional registration body and number, clinic address, and any photos you upload.
• Payment information: card payments are handled entirely by our payment processor, Stripe.Aesthet never sees or stores your full card details.
• Technical data: a single session cookie that keeps you logged in. We don't use advertising or analytics cookies.

How we use your data

We use your data to:

• Create and manage your account;
• Process bookings and payments between patients and practitioners;
• Verify a practitioner's professional registration before their listing goes live;
• Send booking confirmations, reminders, and other service-related emails;
• Investigate reports, disputes, or suspected misuse of the platform; and
• Meet our legal and accounting obligations.

Who we share it with

We don't sell your data. We share it only with the following categories of third party, each of whom processes it on our behalf under their own data protection agreements:

• Stripe, to process payments and payouts;
• Resend, to send transactional emails (booking confirmations, reminders, password resets);
• Cloudflare, to store encrypted backups of our database;
• The practitioner or patient on the other side of a booking, limited to what's needed to carry it out; and
• Regulators or authorities, where we're legally required to.

How long we keep it

We keep financial records relating to payments, such as booking and transaction history, for as long as we're legally required to for tax and accounting purposes (7 years). Other personal data, such as profile details and booking notes, is deleted sooner, typically within 12 months of your account being closed or becoming inactive unless we're required to keep it for a dispute, investigation, or legal obligation.

Marketing emails

We'll only send you marketing emails (for offers or promotions) if you've actively opted in to receive them. Every marketing email includes a one-click way to unsubscribe, and doing so never affects the booking-related emails you need to receive to use the service.

Cookies

We use a single, strictly necessary session cookie to keep you logged in. We don't use advertising, tracking, or analytics cookies.

Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Ask us to delete your data, subject to our legal retention obligations above;
• Restrict or object to certain kinds of processing;
• Receive your data in a portable format; and
• Withdraw consent at any time, where consent is our basis for processing.

To exercise any of these rights, email privacy@aesthet.co.uk. If you're unhappy with how we've handled your data, you also have the right to complain to the Information Commissioner's Office (ICO).

Age restriction

You must be 18 or over to create an account or book a treatment through this platform.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll let you know by email or via a notice on the site before they take effect.

Contact us

For anything relating to this policy or your personal data, contact privacy@aesthet.co.uk.