.png)
Privacy Policy
Last updated: 15 August 2026
360 Aesthetics Ltd (“360 Aesthetics”, “we”, “us” or “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, make a booking, purchase a service or receive treatment from us.
We process personal information in accordance with applicable UK data protection legislation, including the UK General
Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
360 Aesthetics Ltd provides aesthetic treatments, consultations and training services.
For the purposes of UK data protection law, 360 Aesthetics Ltd is the data controller for personal information covered by this Privacy Policy.
Contact details:
2. Information We May Collect
Depending on how you interact with us, we may collect:
• Your full name
• Date of birth
• Address
• Email address
• Telephone number
• Appointment and booking information
• Consultation and treatment information
• Medical history and relevant health information
• Allergies and medications
• Previous aesthetic treatments
• Treatment notes and clinical records
• Before-and-after or clinical photographs
• Consent documentation
• Correspondence between you and 360 Aesthetics
• Transaction and payment information
• Information relating to complaints or treatment reviews
• Website usage information
• IP address and device/browser information
• Cookie and analytics information
• Marketing preferences
We will only collect information that is reasonably necessary for the relevant purpose.
3. Health and Medical Information
When providing aesthetic treatments, we may need to process information concerning your health.
Health information is classed as special category personal data under UK GDPR and receives additional protection.
We collect relevant health information so that we can assess treatment suitability, identify contraindications, provide treatments safely, maintain appropriate clinical records and manage any complications or follow-up care.
Where required, we will identify an appropriate lawful basis under Article 6 UK GDPR and an appropriate condition for processing special-category information under Article 9 UK GDPR.
4. How We Use Your Information
We may use your information to:
• Arrange and manage appointments
• Provide consultations and aesthetic treatments
• Determine whether a treatment is appropriate for you
• Maintain clinical and treatment records
• Contact you regarding appointments or aftercare
• Provide treatment reviews and follow-up care
• Process payments
• Respond to enquiries
• Manage complaints or disputes
• Maintain appropriate business and financial records
• Meet legal, regulatory, professional and insurance requirements
• Protect our business and clients against fraud or misuse
• Improve our website and services
• Send marketing communications where permitted by law
We will not use your personal information for purposes that are incompatible with those for which it was collected unless permitted or required by law.
5. Our Lawful Bases for Processing
Depending upon the circumstances, we may process personal information because:
• It is necessary to perform a contract with you or take steps at your request before entering into a contract
• We have a legal obligation to process the information
• Processing is necessary for our legitimate interests or those of another party, provided your rights do not override those interests
• You have provided consent where consent is the appropriate lawful basis
Where special-category information such as health data is processed, we will also rely upon an appropriate condition permitted under Article 9 UK GDPR.
The exact lawful basis may vary depending upon the information concerned and the reason we are processing it.
6. Clinical and Before-and-After Photographs
Photographs may be taken as part of your consultation, treatment, assessment, aftercare or clinical record.
Where photographs are required for legitimate clinical or record-keeping purposes, they will be handled as part of your confidential treatment information.
We will not automatically use clinical photographs for advertising simply because they have been taken for your treatment record.
Where your identifiable photographs or videos are intended to be used for promotional purposes, including our website or social media, appropriate permission will be obtained where required.
Where marketing use relies upon your consent, you may withdraw that consent for future use by contacting us. Withdrawal does not make previous lawful processing unlawful.
7. Payments
Payments may be processed using third-party payment providers.
We do not necessarily receive or retain your complete debit or credit card information when payments are processed directly by an external payment provider.
Payment providers process information in accordance with their own privacy and security arrangements.
8. Sharing Your Information
We do not sell your personal information.
Where reasonably necessary, information may be shared with trusted third parties such as:
• Website and hosting providers
• Appointment and booking platforms
• Payment processors
• IT and cloud-storage providers
• Accountants
• Professional advisers
• Insurers and insurance advisers
• Healthcare professionals where appropriate and lawful
• Legal advisers
• Regulators, courts, law enforcement agencies or other authorities where legally required
Third-party providers should only receive information reasonably necessary to perform the relevant service and must handle personal information appropriately.
9. International Transfers
Some of the technology and service providers we use may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection requirements.
This may include relying upon an adequacy decision or approved contractual safeguards where required.
10. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, clinical, professional, insurance, tax and regulatory requirements.
Different categories of information may therefore be retained for different periods.
Clinical and treatment records may need to be retained even where you subsequently ask us to delete your information if there is a lawful or professional reason requiring continued retention.
11. Marketing
Where permitted, we may contact you regarding treatments, services, promotions, clinic dates or other relevant updates.
Where consent is required for electronic marketing, we will obtain it before sending those communications.
You can unsubscribe from marketing communications at any time by using the unsubscribe option provided or contacting us directly.
Unsubscribing from marketing does not prevent us from sending necessary service communications concerning appointments, payments, treatments or aftercare.
12. Cookies
Our website may use cookies and similar technologies to operate correctly, remember preferences, understand how visitors use the website and support analytics or marketing.
Where required, non-essential cookies will only be used after you have made the relevant cookie choice.
Further information may be provided through our cookie notice or cookie settings.
13. Keeping Your Information Secure
We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, disclosure, alteration or destruction.
Access to confidential client information is restricted to individuals who have an appropriate reason to access it.
However, no internet-based system can be guaranteed to be completely secure.
14. Your Data Protection Rights
Depending upon the circumstances, UK data protection law may give you the right to:
• Request access to personal information we hold about you
• Ask us to correct inaccurate information
• Request deletion of information in certain circumstances
• Request restriction of processing
• Object to certain types of processing
• Request transfer of certain information
• Withdraw consent where processing is based upon consent
• Object to direct marketing
These rights are not absolute, and there may be circumstances where we are legally permitted or required to continue retaining or processing information.
We may need to verify your identity before responding to a request.
15. Children’s Information
Our services are primarily intended for adults.
Where we lawfully provide a service involving a person under the age of 18, additional consent, safeguarding and data-protection considerations may apply.
16. Links to Other Websites
Our website may contain links to websites operated by other organisations.
We are not responsible for the privacy practices of external websites. You should review their privacy policies before providing personal information.
17. Complaints and Questions
If you have a question about how we use your personal information or wish to exercise a data-protection right, please contact:
360 Aesthetics Ltd
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent data-protection regulator.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our services, systems, suppliers or legal obligations.
The most recent version will be published on our website with an updated revision date.
Last updated: 15 August 2026