WHAT IS THIS PRIVACY POLICY FOR?

 

This privacy notice explains how The Aesthetics Group & Academy UK. known as The Aesthetics Group looks after the personal information you give us or that we learn by having you as a client and the choices you make about marketing communications you agree we may send you. This notice explains how we do this and tells you about your privacy rights and how the law protects you.

The Aesthetics Group & Academy, Aesthetic Centre & Training Academy located in Shaw Village Centre, Swindon, Wiltshire.

 

 

TOPICS:

 

• What information we collect about you
• How information about you will be used
• Marketing
• Employment
• How long your information will be kept for
• Where your information is kept
• Access to your information and correction
• Cookies
• Other websites
• Changes to our privacy notice
• How to contact us

 

 

 

WHAT INFORMATION WE COLLECT ABOUT YOU

​

We collect information about you when you book an appointment for a consultation or treatment, visit the premises for a consultation or treatment, buy a product, apply for a job or apply to become a course model, whether the contact is in person, online, on paper, by email or over the phone.

The information you give us may include your name, address, email address, phone number, relevant history which may suggest that a service or treatment should not go ahead or certain products should not be used (eg allergies, pregnancy, skin conditions, medical conditions), payment and transaction information, IP address and CVs.

We operate CCTV across the premises for the safety and security of our clients and staff as well as a deterrent for the purpose of criminal activity

 

 

 

HOW INFORMATION ABOUT YOU WILL BE USED

 

In law, we are allowed to use personal information, including sharing it outside the clinic/salon, only if we have a proper reason to do so, for example:

To fulfil a contract with you ie to provide the service or treatment you have requested and to communicate with you about your appointments
When it is in our legitimate interest ie there is a business or commercial reason to do so, unless this is outweighed by your rights or interests.
When you consent to it: we will always ask for your consent to hold and use health and medical information.

We will, therefore, share your information with:
Providers of our salon IT systems SHEDUL/FRESHA and Google Suite
Suppliers of our website: GoDaddy and WIX.com
We have rigorous data protection and security policies in place with all our suppliers.

Some of the people working in our clinic are self-employed.  Where software systems and reception facilities are shared, our self-employed colleagues will have access to your information.

We will not share your information with any other third party without your consent except to help prevent fraud, or if required to do so by law.

 

 

MARKETING

 

We would like to send you information about products and services which may be of interest to you.  We will ask for your consent to receive marketing information.

If you have consented to receiving marketing, you may opt-out at a later date.

You have the right at any time to stop us from contacting you for marketing purposes or giving your information to third party suppliers of products or services.  If you no longer wish to be contacted for marketing purposes, please contact us.

 

 

 

EMPLOYMENT

​

The information we collect about employees, the purposes it is used for and who it will be shared with is set out in our employment contracts and employee handbook.

 

 

 

HOW LONG YOUR INFORMATION WILL BE KEPT FOR

​

Unless you request otherwise, we will keep your information to contact you no more than 5 times per year for a maximum of 1 year from your last visit to the clinic.

After a year we will archive all your personal information, except for your name, relevant client history (eg. allergy test records which we keep for 4 years) and financial transactions (which we are obliged to keep for 6 years).

Information about unsuccessful job applicants will be deleted after four months.

CCTV images are automatically deleted after 30 days.

See our data retention policy for further information, including employee data.