PRIVACY POLICY
At Elaine Adams Aesthetics, I am committed to protecting your personal information and complying with GDPR.
1. What Data I Collect & Why
I collect your name, contact details, medical history, consultation forms and treatment notes so I can provide safe aesthetic treatments, manage your bookings and meet insurance/legal requirements.
I may also collect photos with your consent.
Some data is required — without it, I may not be able to treat you.
2. How Your Data Is Stored & Shared
Your information is stored securely within Timely and other trusted systems used for bookings, payments and communication.
These third parties only process your data as needed to deliver their service.
Some data may be transferred outside the UK/EU (e.g., Timely’s servers), with safeguards in place.
Cookies may be used when booking online.
3. Who Controls Your Data
Data Controller: Elaine Adams Aesthetics, Scissett, HD8
Contact: [elaineadams1973@gmail.com] / [07850308083]
4. How Long Your Data Is Kept
Treatment records are kept for up to 7 years (as required by insurance).
Marketing consent is kept until you withdraw it.
You may request deletion unless I am legally required to retain the information.
5. Your Rights
You have the right to access, correct, delete or transfer your data, and to withdraw consent at any time.
You can also object to certain processing and lodge a complaint with the ICO if needed.
I do not use automated decision‑making.
If you have any questions, please contact me directly.