Privacy Policy
How Alula Aesthetics collects, uses and protects your personal data, in line with UK GDPR and the Data Protection Act 2018.
1. Who we are
ALULA AESTHETICS LTD (trading as Alula Aesthetics) is the data controller for personal data collected through this website and our clinics. We are a UK doctor-led medical practice. Our registered office and clinic addresses are listed in the contact information at the foot of this page.
2. Information we collect
We collect information you provide when you make an enquiry, book a consultation, or attend a clinic. This includes name, email, phone number, postcode, and your reason for contacting us. During clinical consultations we collect medical history, photographs (with consent), treatment notes and consent records as a regulated medical record.
3. How we use your information
We use enquiry data to respond to your enquiry and arrange a consultation. We use clinical data to provide safe medical care, document treatment, and meet our professional regulatory obligations. We never sell your data. We may, with your consent, contact you about appointment reminders or follow-up communications.
4. Lawful basis
Our lawful bases for processing under UK GDPR include: consent (for marketing communications); contract (to provide the consultation or treatment you requested); legitimate interests (responding to enquiries); legal obligation (medical record retention requirements); and vital interests (in any clinical emergency).
5. Data security
We hold your data securely. Clinical records are kept on secure systems consistent with the standards expected of a UK medical practice. Website enquiry data is held with our CRM provider under a contracted data-processing agreement. We notify the ICO of any data breach in line with UK GDPR requirements.
6. Sharing your information
We do not sell or share your data. We use trusted suppliers (CRM, email, payment processors) under written data-processing agreements. We may share clinical information with another medical practitioner if you ask us to (for example, your GP) and only with your explicit written consent — except where required by law.
7. Your rights
Under UK GDPR you have the right to access your data, request correction, request erasure (subject to medical record retention obligations), object to processing, restrict processing, and complain to the Information Commissioner's Office (ICO). To exercise any of these rights, contact us using the details below.
Contact us about data
For any data-protection enquiry — access, correction, erasure or otherwise — please write to us by email or by post:
- Email: alulaaesthetics@yahoo.com
- Post: 3 Lady Acre Close, Lymm, Cheshire, WA13 0SN
- You also have the right to complain directly to the Information Commissioner's Office at ico.org.uk.