What personal information I collect, why I need it, who else sees it and the rights you have over it, in plain English.
Who I am
Aesthetics by Hayley is run by Hayley Ford, trading as Aesthetics by Hayley. That makes me the data controller for your personal information. I am registered with the Information Commissioner’s Office (ICO), registration number.
Contact me about anything in this notice by email at info@aestheticsbyhayley.co.uk, by phone on 07824 367575, or by post at Aesthetics by Hayley (Located within Minsony), 260 Pentonville Road, London N1 9JY.
What I collect and why
When you use the contact form
The form asks for your name, email address, phone number and message. I use them only to reply to you, and I delete messages after months unless you go on to book. To block spam, the form also keeps a scrambled (hashed) version of your IP address for a short time.
When you book
Bookings are handled by Ovatu, my online booking system. Ovatu collects your name, contact details and the appointment you choose, and passes them to me so I can see you. Card payments, including deposits, are processed by Stripe through Ovatu, and I never see your full card number. I use this information to provide the treatment you have booked. Ovatu and Stripe each have their own privacy notice; Stripe’s is at stripe.com/gb/privacy.
When you message me on WhatsApp
If you message me on WhatsApp, I see your phone number, your profile name and whatever you send. I use it to reply and to arrange your appointments. WhatsApp is run by Meta, and its own privacy policy covers how it handles your messages.
Your consultation and treatment records
I record your medical history, consultation, consent and the details of each treatment, including the products used. Health information is special category data under the law, so I only collect it with your explicit consent, given when you complete your forms. I may take photos of the treated area for your record. I will only use a photo of you on my website or social media with your separate written consent, which you can withdraw at any time.
I keep treatment records for years after your last appointment, in case you have questions or concerns about a treatment later.
When you visit this website
Google Analytics and Meta advertising cookies are only used if you accept them. See cookies below.
Who else sees your information
- Ovatu, for bookings, and Stripe, for card payments
- Google, which provides my email, and Google Analytics if you accept analytics cookies
- Meta, if you message me on WhatsApp or accept advertising cookies
- The company that hosts this website
- My insurer or professional advisers, if they need it to deal with a claim or complaint
- Anyone the law requires me to share it with
I never sell your information. Some of these companies may handle data outside the UK. When they do, they use the safeguards UK law requires.
Your rights
Under UK GDPR, you can ask me to:
- give you a copy of the information I hold about you
- correct anything that is wrong
- delete your information, where I do not have to keep it
- limit how I use it, or stop using it
- send it to you in a format you can take elsewhere
Where I rely on your consent, you can withdraw it at any time. To use any of these rights, email me. I will reply within one month, and in most cases there is no charge.
How to complain
If you are unhappy with how I have handled your information, please tell me first and I will try to put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Cookies
Cookies are small files a website stores on your device. This site sets one cookie of its own. With your consent, it also uses Google Analytics to see how people use the site, and Meta cookies to measure my adverts. Neither loads until you accept in the cookie banner.
| Cookie | What it does | How long it lasts |
|---|---|---|
abh_consent | Remembers your cookie choice, so the banner does not ask again | 6 months |
_ga | Google Analytics: tells one visitor from another | 2 years |
_ga_* | Google Analytics: keeps track of your visit | 2 years |
_fbp | Meta: measures visits that come from my adverts | 3 months |
The booking page shows Ovatu’s booking system, which may set its own cookies; Ovatu’s privacy notice explains them. You can change your cookie choice at any time using the cookie settings link at the bottom of every page.
This notice was last updated in.