Privacy Policy

Last Updated: 31 August 2026

Aesthetic Angels By Amanda

Aesthetic Angels By Amanda ("we", "us", or "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, book appointments, or receive treatments from us.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection laws.

1. Who We Are

Aesthetic Angels By Amanda
ABS Business Park
1 Viaduct Street
Stanningley
Pudsey
LS28 6AU

General Email: info@aestheticangelsbyamanda.com
Telephone: 07974 750352

Data Controller

The Data Controller responsible for your personal information is:

Amanda Sarsfield
Email: amanda@aestheticangelsbyamanda.com

2. Information We Collect

We may collect and process the following information:

Personal Information

Full name
Date of birth
Postal address
Email address
Telephone number
Emergency contact details (where applicable)

Health and Treatment Information

To ensure treatments are safe and appropriate, we may collect:

Medical history
Health questionnaires
Current medications
Allergies
Treatment suitability information
Consultation notes
Consent forms
Treatment records
Before and after photographs

Appointment Information

Booking details
Appointment history
Cancellation records
Communication preferences

Payment Information

Payment records
Transaction information

Please note that we do not store full payment card details.

Website Information

When you visit our website, we may automatically collect:

IP address
Browser type and version
Device information
Website usage information
Cookie data

3. Clinical Records and Digital Systems

To safely provide aesthetic treatments, we maintain consultation records, consent forms, treatment notes, medical questionnaires, and treatment photographs where appropriate.

We use secure third-party service providers to help manage our business operations, including:

Ovatu for appointment booking, appointment reminders, scheduling, and client management.
Secure clinical or aesthetics management software for consultation forms, consent forms, treatment records, treatment photographs, and client documentation.

These systems act as data processors on our behalf and are required to implement appropriate security measures to protect your information.

4. How We Use Your Information

We use your personal information to:

Provide consultations and treatments.
Assess suitability for treatments.
Maintain accurate client records.
Schedule and manage appointments.
Send appointment confirmations and reminders.
Process payments.
Respond to enquiries.
Provide aftercare support.
Comply with legal, insurance, regulatory, and professional obligations.
Improve our services and customer experience.
Send marketing communications where you have consented to receive them.

5. Legal Basis for Processing

We process your information under one or more of the following lawful bases:

Contract

Processing is necessary to provide treatments, consultations, bookings, and related services.

Legal Obligation

Processing is necessary to comply with legal, regulatory, tax, insurance, and health and safety requirements.

Legitimate Interests

Processing is necessary for the effective operation and management of our business, record keeping, service improvements, and fraud prevention.

Consent

We rely on consent for:

Marketing communications.
Treatment photographs where consent is required.
Certain health-related processing where explicit consent is appropriate.

You may withdraw your consent at any time by contacting us.

6. Special Category Data

As an aesthetics practitioner, we process health-related information which is classified as Special Category Data under UK GDPR.

This information is collected only where necessary to:

Assess treatment suitability.
Protect your health and wellbeing.
Deliver treatments safely.
Maintain accurate clinical records.
Meet legal and insurance obligations.

We take additional steps to safeguard this information and limit access to authorised personnel only.

7. Marketing Communications

If you have opted in, we may occasionally send information regarding:

New treatments and services
Promotions and special offers
Business updates
Events and announcements

You can opt out of marketing communications at any time by:

Clicking the unsubscribe link in emails; or
Contacting us directly at info@aestheticangelsbyamanda.com

We will never share your personal information with third parties for their own marketing purposes.

8. Sharing Your Information

We do not sell or rent your personal information.

We may share information with trusted third parties where necessary, including:

Ovatu booking and client management services.
Clinical records and consent management software providers.
Payment processors.
Professional advisers such as accountants, solicitors, and insurers.
Healthcare professionals where necessary to ensure client safety.
Regulatory bodies, government authorities, or law enforcement where required by law.

All third parties are required to process your data securely and in accordance with applicable data protection legislation.

9. International Transfers

Some of our service providers may store or process information outside the United Kingdom.

Where this occurs, we will ensure appropriate safeguards are in place to protect your personal information and ensure compliance with UK GDPR requirements.

10. Data Security

We take appropriate technical and organisational measures to protect your personal information against:

Unauthorised access
Accidental loss
Misuse
Alteration
Disclosure
Destruction

Examples of our security measures include:

Password-protected systems
Secure cloud storage
Restricted access to records
Secure third-party software providers
Staff confidentiality obligations

Despite our efforts, no method of electronic transmission or storage is completely secure. However, we take reasonable steps to minimise risks and protect your information.

11. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, regulatory, professional, and insurance requirements.

Consultation records, consent forms, treatment records, and treatment photographs may be retained for up to seven years after your last treatment, or longer where required by law, insurance requirements, or where a claim may reasonably arise.

When information is no longer required, it will be securely deleted, destroyed, or anonymised.

12. Your Rights

Under UK GDPR, you have the right to:

Request access to your personal information.
Request correction of inaccurate information.
Request deletion of your information in certain circumstances.
Request restriction of processing.
Object to processing.
Request transfer of your information to another organisation.
Withdraw consent where processing is based on consent.
Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact:

Amanda Sarsfield
Email: amanda@aestheticangelsbyamanda.com

13. Cookies

Our website may use cookies and similar technologies to improve functionality, analyse website traffic, and enhance your browsing experience.

You can manage cookie preferences through your browser settings. Where required by law, we will seek your consent before placing non-essential cookies on your device.

14. Third-Party Websites

Our website may contain links to external websites or social media platforms.

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review their privacy policies before providing any personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or the services we offer.

Any updates will be published on this page, and the updated version will take effect immediately upon publication.

16. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Amanda Sarsfield
Data Controller