Privacy Policy — Aespect Healthcare

Effective date: 7 May 2026
Last updated: 7 May 2026

1. Who We Are

Aespect Healthcare is a nurse-led clinical practice providing healthcare and aesthetic treatments in the United Kingdom.

Data Controller:
Aespect Healthcare
Esher, United Kingdom
Phone: 07726 684829
Website: www.aespect.co.uk
Email: info@aespect.co.uk

Aespect Healthcare is responsible for the collection, use, and protection of your personal data.

For data protection queries, you may contact us at the details above (for the attention of the Data Protection Lead).

2. The Data We Collect

We may collect and process the following categories of personal data:

Identity and Contact Data
Name, phone number, email address

Health Information (Special Category Data)
Medical history, consultation notes, treatment records, and other relevant clinical information required to assess suitability and provide care

This data is treated with the highest level of confidentiality and is only collected where necessary for clinical purposes.

Marketing and Communication Data
Preferences for receiving communications, enquiry details, and interactions with our services

Technical and Usage Data
IP address, browser type, device information, and how you use our website

3. How We Use Your Data

We use your data to:

  • Respond to enquiries and provide consultations
    • Assess suitability for treatments and deliver safe clinical care
    • Maintain accurate clinical records
    • Manage appointments and follow-up care
    • Improve our services and website experience
    • Deliver and measure advertising campaigns (including META platforms such as Facebook and Instagram)
    • Comply with legal, regulatory, and professional obligations

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Consent — where you have provided clear permission (e.g. marketing, enquiries)
    • Contractual necessity — where processing is required to provide a service
    • Legitimate interests — to operate and improve our services responsibly
    • Legal obligation — to meet healthcare and regulatory requirements

For health-related data (special category data), processing is carried out for the purposes of healthcare provision and treatment, in line with UK GDPR requirements.

5. Clinical Confidentiality

As a healthcare provider, we are bound by professional and ethical duties of confidentiality.

Your clinical information is:

  • Collected only where necessary
    • Used solely for your care and related administration
    • Stored securely and accessed only by authorised personnel

6. Marketing and META Advertising

We may use your data to deliver relevant advertising and measure performance through platforms such as Facebook and Instagram (META).

This may include:

  • Tracking interactions with our website using cookies and similar technologies
    • Measuring the effectiveness of advertising campaigns
    • Showing relevant adverts to individuals who have previously visited our website (retargeting)

We may use tools such as the Meta Pixel and/or Conversion API, which allow META to collect or receive information from our website and use it for advertising and analytics purposes.

You can control how your data is used for advertising by:

  • Adjusting your Facebook or Instagram ad settings
    • Managing cookie preferences on our website
    • Changing your browser settings

7. Cookies

Our website uses cookies and similar technologies to:

  • Ensure the website functions properly
    • Analyse usage and improve performance
    • Support advertising and retargeting

Cookies may include:

  • Essential cookies (required for site functionality)
    • Analytics cookies
    • Marketing cookies

You will be given the option to accept or manage cookies when you first visit our website.

8. Sharing Your Data

We do not sell your personal data.

We may share your data with:

  • Trusted service providers (e.g. booking systems, website hosting, analytics providers)
    • Clinical laboratories or partners where required for your care
    • Regulatory bodies where legally required

All third parties are required to maintain appropriate security and confidentiality.

9. International Data Transfers

Some of our service providers (including META) may process personal data outside the United Kingdom or European Economic Area.

Where this occurs, appropriate safeguards are in place to ensure your data is protected in accordance with UK GDPR.

10. Data Retention

We retain personal data only for as long as necessary:

  • Clinical records are retained in accordance with UK healthcare record retention guidelines
    • Enquiry and marketing data is retained only as long as required for communication and analysis

11. Data Security

We take appropriate technical and organisational measures to protect your data, including:

  • Secure systems and controlled access
    • Confidential handling of clinical information
    • Regular review of data protection practices

12. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
    • Request correction of inaccurate information
    • Request deletion where applicable
    • Restrict or object to processing
    • Withdraw consent at any time
    • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us using the details above.

13. Third-Party Links

Our website may contain links to external websites. We are not responsible for their privacy practices.

14. Updates to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.

15. Contact

For any questions regarding this Privacy Policy or your data:

Aespect Healthcare
Phone: 07726 684829
Website: www.aespect.co.uk
Email: info@aespect.co.uk