Who we are
The data controller is Alexandra Cecilia Aesthetics Ltd, registered in England and Wales (company number XXXXXXXX). Registered office: [Full Address, Postcode]. For privacy enquiries contact hello@alexandraceciliaaesthetics.example.
Data we may collect
We may process identifiers and contact details you submit (for example through our consultation request form), technical data such as IP address and browser type from server logs, and communications you send us. Health-related information may be collected only where necessary for clinical care and in line with professional obligations, separate from marketing use.
Purposes and lawful bases
We use personal data to respond to enquiries, arrange appointments, operate and secure our website, comply with legal duties, and (where you have consented or the law allows) send relevant practice updates. Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal.
Retention and sharing
Data is kept only as long as needed for the purposes above, including any statutory or professional retention periods. We may use trusted processors (for example hosting or email delivery) under contracts that require them to protect your information. We do not sell your personal data.
Your rights
Under UK data protection law you may have rights of access, rectification, erasure, restriction, objection, and data portability in certain circumstances, and the right to complain to the Information Commissioner’s Office (ICO). We will respond to valid requests within applicable time limits.
Changes
We may update this policy from time to time. The “last updated” date at the foot of this page will be revised when material changes are made.
Last updated: April 16, 2026.