Privacy Policy


Effective Date: [Insert date]

At 4A Aesthetics, we take your privacy seriously and are committed to protecting your personal data. This Privacy Notice outlines how we collect, use, store, and share your information, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. Who We Are

4A Aesthetics is operated by a qualified Prescriber Pharmacist and Advanced Aesthetician based in Leicester, UK. For the purposes of data protection law, we are the “data controller” of your personal information.


2. What Information We Collect

We may collect and process the following data:

  • Full name
  • Date of birth
  • Address
  • Email address and phone number
  • Medical history and treatment details
  • Photos (before/after) of treatment areas
  • Consent records
  • Payment and booking details

3. Why We Collect Your Data

We collect your data for the following purposes:

  • To assess suitability for treatments and maintain safety
  • To provide aesthetic services and aftercare
  • For appointment and follow-up communications
  • To comply with legal and regulatory obligations
  • With your consent, for marketing and promotional purposes

4. Consent to Use Photos for Marketing

With your explicit written consent, we may use before and after photos for the following purposes:

  • Display on our social media platforms (e.g., Instagram, Facebook)
  • Marketing on our official website
  • Use in educational or promotional materials

You have the right to withdraw your consent at any time by contacting us at the details provided below. Withdrawal of consent will not affect any use that occurred prior to withdrawal.

We will never share images without your signed permission and will ensure any identifying features are removed or hidden upon request.


5. How Long We Keep Your Data

We will retain your information for as long as necessary to provide our services and meet legal, medical, or insurance obligations. Typically, medical records are retained for a minimum of 7 years from the date of your last treatment.


6. Sharing Your Data

We will never sell or rent your personal data. Your information may be shared with:

  • Regulatory or legal bodies (if legally required)
  • Insurance providers (if required for claims)
  • Secure software platforms used for bookings, payments, or medical records (with strict data protection compliance)

7. Your Data Protection Rights

Under UK data protection law, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data (subject to legal exceptions)
  • Withdraw consent at any time
  • Object to or restrict processing in certain circumstances

To exercise these rights, please contact us.


8. How We Store Your Information

Your data is stored securely using encrypted digital systems and password-protected devices. Paper records (if used) are kept in locked storage and disposed of securely when no longer needed.


9. Contact Us

If you have any concerns about your data or this notice, please contact us.