Legal
Privacy Policy
Last updated: August 2026
This policy explains how Delivery Aesthetics collects, uses, shares and protects your personal data when you use our website and book a treatment. We take your privacy — and your health information in particular — seriously, and we handle your data in line with the UK GDPR and the Data Protection Act 2018.
1.Who is responsible for your data
Delivery Aesthetics is the "data controller" for the personal data described in this policy — meaning we decide how and why it is used. We are a company registered in England and Wales under Company No. 00000000 (registration to be confirmed).
For any privacy question, or to exercise your rights, email us at hello@deliveryaesthetics.com.
A note on your specialist. The independent specialist who treats you also acts as a controller for the health and treatment information they record about you in the course of providing your treatment, as they are professionally required to do. For the booking data we pass to them so they can attend your appointment, we share controller responsibilities. We ask all specialists on our platform to handle your data lawfully and confidentially.
2.What data we collect
We collect the following categories of personal data, mostly directly from you when you request a quote or make a booking:
- Contact details — your name, email address and, where you provide it, your phone number.
- Address & location — the postcode you enter for a quote, and the full address where your treatment will take place.
- Booking details — the treatment you choose, your appointment date and time, your quote, any add-ons and your booking reference.
- Payment information — whether you pay on the day or in advance. If you pay in advance, your card details are entered directly with our payment processor; we receive confirmation of payment and limited details (such as the last four digits and card type), but not your full card number.
- Limited health & suitability information — for treatments that require a suitability check (see section 3).
- Communications — the content of emails and messages you send us, and our replies.
- Technical & usage data — collected automatically when you use the website, such as your device type, browser, IP address and how you navigate the site (see section 8).
3.Health & suitability data (special-category data)
Some of the information we collect is "special-category" data under the UK GDPR — specifically, the limited health information you provide during the suitability check for medical treatments. This includes answers about relevant conditions and circumstances, such as pregnancy or breastfeeding, whether you have a pacemaker or other implanted device, metal implants, certain skin conditions, or recent surgery or medication.
We collect this data only to confirm that a treatment is safe and suitable for you before your booking is confirmed, and we share the relevant parts with the qualified specialist assigned to your booking so they can make a clinical decision. We do not use health data for marketing, and we apply extra care to how it is stored and accessed. Our lawful bases for processing it are explained in section 5.
4.Why we use your data
We use your personal data to:
- generate your quote and take and manage your booking;
- carry out the suitability check and confirm a treatment is appropriate for you;
- match you to a suitable specialist and give them the details they need to attend and treat you safely;
- take payment and process refunds;
- send you booking confirmations, reminders and service messages;
- respond to your enquiries, provide support and handle complaints;
- keep records for our legal, insurance, accounting and tax obligations;
- maintain the security of, and improve, our website and service; and
- where you have agreed, send you marketing about treatments and offers.
5.Our lawful bases for using your data
Under the UK GDPR we must have a lawful basis for each use of your data. We rely on the following:
| What we do | Lawful basis |
|---|---|
| Take and fulfil your booking, take payment, send service messages | Contract — processing necessary to provide the service you asked for. |
| Keep financial, tax and insurance records; comply with legal duties | Legal obligation. |
| Secure and improve our site, prevent fraud, defend legal claims, and market to existing clients | Legitimate interests — balanced against your rights, and only where they do not override them. |
| Non-essential cookies and analytics; marketing emails to new prospects | Consent — which you can withdraw at any time. |
| Process your health & suitability information (special-category data) | Explicit consent to the suitability check, supported by the "health or social care" condition and, where relevant, the condition for establishing, exercising or defending legal claims. |
6.Who we share your data with
We do not sell your personal data. We share it only where it is needed to deliver your booking or to run our business responsibly:
- Your assigned specialist — we share your name, contact details, treatment address, appointment details and the relevant suitability information so they can attend and treat you safely.
- Our payment processor — a regulated third party that handles advance card payments securely on our behalf.
- Service providers — trusted suppliers who help us operate, such as hosting, email delivery, booking and analytics providers, acting under contract and only on our instructions.
- Professional advisers & insurers — for example accountants, lawyers or insurers, where reasonably necessary.
- Authorities — where we are required to disclose data by law, regulation or a valid legal request.
- A buyer or successor — if our business is reorganised, sold or transferred, subject to this policy.
7.How long we keep your data
We keep personal data only for as long as we need it for the purposes above, and then delete or anonymise it. In general:
- Booking and contact records are kept for the duration of our relationship and for a reasonable period afterwards to handle queries, complaints and potential claims.
- Health & suitability records are retained in line with professional and clinical-record guidance and the period during which a claim could be brought, then securely deleted.
- Financial records are kept for at least six years to meet accounting and tax requirements.
- Marketing preferences are kept until you unsubscribe or ask us to stop.
8.Cookies & analytics
Our website uses cookies and similar technologies. Strictly necessary cookies are needed for the site and booking flow to work and cannot be switched off. Analytics cookies help us understand how visitors use the site so we can improve it — these are set only where you consent, and you can withdraw consent at any time through your browser settings or any cookie controls we provide. We do not use cookies to make automated decisions that produce legal effects about you.
9.How we protect your data
We use appropriate technical and organisational measures to keep your data safe, including encryption in transit, access controls that limit who can see your information, and additional safeguards for health data. No system can be completely secure, but we work to protect your data and to detect and respond to any incident. If a breach occurs that is likely to put your rights at risk, we will notify the Information Commissioner's Office and, where required, you.
10.International transfers
We aim to keep your data within the UK or the European Economic Area. Where a service provider processes data outside these areas, we make sure appropriate safeguards are in place — such as UK adequacy regulations or the International Data Transfer Agreement / standard contractual clauses — so your data receives an equivalent level of protection.
11.Your rights
Under UK data protection law you have the right to:
- be informed about how we use your data (this policy);
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data in certain circumstances ("right to be forgotten");
- restrict or object to our processing in certain circumstances, including objecting to direct marketing at any time;
- data portability — to receive certain data in a portable format; and
- withdraw consent at any time where we rely on it, without affecting processing carried out before you withdrew it.
To exercise any right, email hello@deliveryaesthetics.com. We may need to verify your identity, and we will respond within one month (which can be extended for complex requests, in which case we will tell you). Exercising your rights is free in most cases.
12.Children
Our service is intended for adults. You must be at least 18 to book a treatment, and we do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
13.Changes to this policy
We may update this policy from time to time to reflect changes in our service or the law. When we do, we will revise the "last updated" date at the top of this page, and we will tell you about significant changes where appropriate.
14.Contact & complaints
If you have any question about this policy or how we handle your data, or if you want to make a request or a complaint, email us at hello@deliveryaesthetics.com. We handle all privacy enquiries by email so there is a clear written record.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk. We would, however, appreciate the chance to resolve your concern first.