Privacy Policy

Effective date: 5 August 2026

1. Introduction

Amilah's Aesthetics is committed to protecting the privacy and personal information of every client.

This Privacy Policy explains how Amilah's Aesthetics collects, uses, stores and protects personal information when you:

• Visit the Amilah's Aesthetics website
• Make an enquiry
• Book an appointment
• Attend a consultation
• Receive a treatment
• Join a promotional or VIP mailing list
• Contact the business by email, telephone, website form or social media

Personal information is handled in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable UK data protection laws.

2. Who We Are

Amilah's Aesthetics provides professional eyebrow and beauty treatments, including microblading, brow lamination, brow tinting, brow waxing and related top-up appointments.

Amilah's Aesthetics is the data controller for personal information collected through:

• amilahsaesthetics.co.uk
• Email enquiries
• Telephone enquiries
• Website contact and booking forms
• Social media messages
• Consultation forms
• In-person appointments and treatments

Before publishing this policy, Amilah's Aesthetics should add its full legal trading name, business status and business address to this section.

3. Personal Information We Collect

Amilah's Aesthetics may collect the following types of personal information.

Contact Information

• Full name
• Email address
• Telephone number
• Home address, where required
• Preferred method of contact

Appointment and Booking Information

• Treatment requested
• Preferred appointment date and time
• Previous appointment history
• Cancellation and rescheduling information
• Appointment notes and reminders
• Deposit and payment status

Consultation and Treatment Information

• Consultation forms
• Treatment consent forms
• Patch test results
• Treatment history
• Products and pigments used
• Treatment dates
• Aftercare information
• Top-up and follow-up appointment records
• Notes about treatment outcomes

Health and Medical Information

Certain treatments offered by Amilah's Aesthetics require the collection of health information to determine whether the treatment is safe and suitable for the client.

This may include information about:

• Allergies
• Skin conditions
• Medications
• Previous reactions to beauty or aesthetic treatments
• Pregnancy or breastfeeding status
• Medical conditions relevant to the treatment
• Recent cosmetic or medical procedures
• Contraindications that may affect treatment suitability

Photographs

Amilah's Aesthetics may take before and after photographs to:

• Record treatment results
• Monitor healing or treatment progress
• Support future top-up appointments
• Maintain an accurate client treatment record

Photographs will only be used for marketing, website content, advertising or social media where the client has provided separate consent.

Payment Information

Amilah's Aesthetics may collect payment-related information, including:

• Amount paid
• Date of payment
• Payment method
• Deposit information
• Refund information
• Invoice and receipt details

Amilah's Aesthetics does not normally store full debit or credit card details. Card payments are processed through the relevant payment provider.

Website Information

When you visit the website, certain technical information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Time spent on the website
• Referral source
• Cookie information

Marketing Preferences

Amilah's Aesthetics may collect information about whether you have chosen to receive:

• Special offers
• Discount codes
• First-booking promotions
• VIP beauty list updates
• New treatment announcements
• Appointment availability updates

4. Treatments Covered by This Policy

This Privacy Policy applies to personal information collected in connection with the treatments and services offered by Amilah's Aesthetics, including:

• Microblading
• Microblading top-up appointments
• Annual microblading top-ups
• Brow lamination
• Brow tinting
• Brow waxing
• Brow tint and wax treatments
• Patch tests
• Consultations
• Aftercare and follow-up appointments
• Any future brow, beauty or aesthetic treatments offered by the business

5. How We Use Personal Information

Amilah's Aesthetics may use personal information to:

• Respond to enquiries
• Arrange consultations
• Schedule and manage appointments
• Send appointment confirmations and reminders
• Assess whether a treatment is suitable and safe
• Carry out treatments
• Maintain accurate treatment records
• Provide aftercare advice
• Manage top-up appointments
• Process deposits, payments and refunds
• Respond to complaints or concerns
• Meet insurance and legal requirements
• Maintain financial and tax records
• Improve the website and client experience
• Send marketing where consent has been provided
• Protect the business against fraud, misuse or legal claims

6. Special Category Health Information

Health and medical information is treated as special category personal data under UK data protection law.

Amilah's Aesthetics only collects this information where it is relevant to treatment safety, suitability, consultation, aftercare or insurance requirements.

This information may be used to:

• Identify treatment contraindications
• Reduce the risk of allergic reactions
• Determine whether a patch test is required
• Decide whether treatment should be delayed or refused
• Protect the health and safety of the client
• Maintain an accurate treatment record
• Respond to a treatment-related complaint or insurance claim

Where required, Amilah's Aesthetics will ask for explicit consent before processing health information.

7. Lawful Bases for Processing

Amilah's Aesthetics relies on one or more of the following lawful bases when processing personal information.

Contract

Personal information may be processed where it is necessary to arrange, provide or manage a treatment or appointment requested by the client.

Legitimate Interests

Personal information may be processed where it is reasonably necessary for the operation of the business, provided those interests do not override the client's privacy rights.

This may include:

• Responding to enquiries
• Maintaining treatment records
• Managing appointments
• Improving services
• Preventing fraud
• Defending legal claims

Legal Obligation

Personal information may be processed where required for tax, accounting, insurance, regulatory or legal purposes.

Consent

Consent may be relied upon for:

• Email or SMS marketing
• Joining the VIP beauty list
• Using before and after photographs for promotional purposes
• Processing certain health information

Consent may be withdrawn at any time. Withdrawal will not affect processing that took place before consent was withdrawn.

8. Before and After Photographs

Before and after photographs may form part of the client's treatment record.

These photographs may be used internally to:

• Record the condition of the treatment area
• Track treatment results
• Assist with future appointments
• Support aftercare and follow-up
• Respond to a complaint or insurance matter

Photographs will not be published on the website, social media, paid advertising or promotional materials unless the client has given clear and separate permission.

Clients may withdraw consent for future marketing use of their photographs at any time. However, Amilah's Aesthetics may retain a private clinical or treatment copy where it is necessary for record-keeping, insurance or legal purposes.

9. Marketing Communications

Amilah's Aesthetics may send promotional communications where the client has actively chosen to receive them.

Marketing communications may include:

• Discount offers
• First-booking promotions
• VIP beauty list updates
• New treatment announcements
• Appointment availability
• Seasonal promotions

You can unsubscribe at any time by:

• Using the unsubscribe option in a marketing email
• Replying to the message
• Emailing Amilah's Aesthetics
• Contacting the business by telephone

Appointment confirmations, treatment information and aftercare messages are service communications rather than marketing messages.

10. Sharing Personal Information

Amilah's Aesthetics does not sell, rent or trade client personal information.

Personal information may be shared with carefully selected service providers where necessary, including:

• Website hosting providers
• Email service providers
• Online booking providers
• Payment processors
• Accountants and bookkeepers
• Insurance providers
• Legal advisers
• IT and website support providers
• Marketing software providers
• Government authorities or regulators where legally required

Service providers are only permitted to use personal information for the purpose of providing their service to Amilah's Aesthetics.

11. Payment Processing

Payments may be processed by a third-party payment provider. The provider may collect payment card details directly under its own privacy and security procedures.

Amilah's Aesthetics may retain transaction information such as the amount, date, payment method and payment status, but does not normally retain full card details.

12. Cookies and Website Analytics

The Amilah's Aesthetics website may use cookies and similar technologies to:

• Make the website function correctly
• Remember visitor preferences
• Understand how visitors use the website
• Monitor website performance
• Measure the effectiveness of advertising
• Improve website content and navigation

Where required, visitors will be asked to accept or reject non-essential cookies.

Visitors can also control or delete cookies using their browser settings. Blocking certain cookies may affect how the website functions.

13. Data Retention

Amilah's Aesthetics keeps personal information only for as long as it is reasonably necessary for the purpose for which it was collected.

Typical retention periods include:

• General enquiries: up to 12 months after the last contact
• Appointment and booking information: for as long as required to manage the appointment and related records
• Consultation and treatment records: normally seven years after the client's last treatment, or longer where required by law, insurance or professional guidance
• Records relating to clients under 18: where applicable, these may be retained until the client reaches the age of 25
• Payment and financial records: normally six years or for the period required by HMRC
• Marketing information: until consent is withdrawn or the information is no longer required
• Photographs: for as long as necessary for treatment, legal, insurance or consented marketing purposes

Information may be retained for longer where it is needed to investigate a complaint, respond to a legal claim or meet an insurance requirement.

14. Data Security

Amilah's Aesthetics takes reasonable steps to protect personal information against:

• Unauthorised access
• Loss
• Misuse
• Disclosure
• Alteration
• Destruction

Security measures may include:

• Password-protected devices and accounts
• Restricted access to treatment records
• Secure website hosting
• Secure email accounts
• Secure storage for paper consultation forms
• Regular software and security updates
• Confidentiality requirements for service providers

No online or electronic system can be guaranteed to be completely secure. Amilah's Aesthetics will respond appropriately to any suspected personal data breach and will notify the Information Commissioner's Office or affected clients where legally required.

15. International Data Transfers

Some service providers used by Amilah's Aesthetics may store or process information outside the United Kingdom.

Where this occurs, appropriate safeguards will be used where required by law, such as:

• UK adequacy regulations
• Approved contractual clauses
• The UK International Data Transfer Agreement
• Other recognised legal safeguards

16. Children's Information

Treatments offered by Amilah's Aesthetics may be subject to minimum age requirements.

Where a client is under 18, parental or legal guardian consent may be required depending on the treatment.

Amilah's Aesthetics does not knowingly collect children's personal information through the website for marketing purposes.

17. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Request restriction of processing
• Object to certain uses of your information
• Request transfer of your information
• Withdraw consent
• Object to direct marketing
• Complain to the Information Commissioner's Office

Some rights are not absolute. Amilah's Aesthetics may need to retain certain information where there is a legal, insurance, contractual or legitimate reason to do so.

18. Access Requests

You may request a copy of the personal information held about you by contacting Amilah's Aesthetics.

Identity verification may be required before information is released. Requests will normally be answered within one month, although additional time may be required for complex requests.

19. Links to Other Websites

The Amilah's Aesthetics website may contain links to third-party websites, social media platforms or booking services.

Amilah's Aesthetics is not responsible for the privacy practices of those websites. Visitors should review the privacy policy of each external website they use.

20. Complaints

If you have concerns about how your personal information has been handled, please contact Amilah's Aesthetics first so that the matter can be investigated.

You also have the right to make a complaint to the Information Commissioner's Office, which is the UK's data protection regulator.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: ico.org.uk

21. Changes to This Privacy Policy

Amilah's Aesthetics may update this Privacy Policy from time to time to reflect changes in:

• Services and treatments
• Booking systems
• Website functionality
• Service providers
• Legal requirements
• Business operations

The latest version will be published on the Amilah's Aesthetics website together with the effective date.

22. Contact Amilah's Aesthetics

To ask a privacy question, exercise your data protection rights or withdraw marketing consent, contact:

Amilah's Aesthetics
Website: amilahsaesthetics.co.uk
Email: booking@amilahsaesthetics.co.uk
Telephone: +44 7393 541969

Business address: 204a Albert Dr, Woking GU21 5TY, UK

Legal business name: Sole Trader Amilah Shah