Privacy Policy

Amina Devorah trading as Aesthetic Bureau, 66 Paul Street, London, EC2A 4NA. This policy explains how we collect, use, and protect personal information in accordance with the Data Protection Act 2018 and applicable UK data protection law.

Data Processing Principles

Aesthetic Bureau manages personal information in accordance with the Data Protection Act 2018. Our approach follows seven core principles:

1. Data is collected only for specified, legitimate purposes
2. Collection is minimised to what is necessary
3. Data is collected only where sensible business reasons exist
4. Data is not repurposed without consent
5. Data is periodically verified and individuals may request amendment
6. High technical security standards are applied throughout
7. Data is stored in identifiable form only as long as necessary

Information We Collect

Aesthetic Bureau may collect the following categories of personal information:

• Contact details
• Personal identifiers
• Occupation and business details
• Website usage and technical data, including IP addresses
• Special category data, collected only with express consent

Data Collection and Use

Information is gathered when individuals book courses, events or programmes; contact us via website, social media, telephone or email; or engage with us commercially.

We use the information collected for the following purposes:

• Processing bookings and enquiries
• Creating and maintaining client database profiles
• Responding to enquiries
• Requesting participation in surveys
• Content optimisation
• Service delivery
• Notifications of changes to our services
• Collecting quality feedback

We will not sell or share personal data for marketing purposes without explicit consent.

Storage and Transfer

Data is stored securely on cloud databases, accessible only to authorised employees via password-protected systems. Third-party providers include WordPress, Stripe, and authorised consultants.

International transfers use safeguards equivalent to UK Data Protection Legislation standards, including the UK Extension to the EU-U.S. Data Privacy Framework.

Data retention period: six years maximum, unless legitimate business reasons justify longer storage.

Legal Basis for Processing

Processing of personal data is lawful where one or more of the following applies:

• Consent has been obtained
• Processing is necessary for the performance of a contract
• Processing is required to comply with a legal obligation
• Processing is necessary to protect vital interests
• Processing is in the public interest
• Processing is based on legitimate interests

Your Rights

Individuals whose data we hold have the following rights:

• To request information about processing and access to personal data
• To withdraw consent at any time
• To receive data in a machine-readable format (data portability)
• To correct inaccurate information
• To request erasure in certain circumstances
• To request restrictions on processing
• To lodge complaints with the Information Commissioner's Office
• To object to processing based on legitimate interest

Third-Party Links

This website may contain links to external websites. Aesthetic Bureau is not responsible for the privacy policies or practices of those sites and recommends that visitors review the relevant policies directly.

Marketing Communications

Subscribers to marketing communications may opt out at any time by emailing info@aestheticbureau.co or by clicking the unsubscribe link in any communication. Opt-outs take effect within 24 hours.

Cookies and Analytics

Third-party analytics providers collect anonymised data including visitor numbers, pages visited and time spent, user interaction metrics, source and exit patterns, page response times, and technical device information.

Targeted advertising may use Facebook, X, Google, and Instagram platforms. Users can limit or disable cookies through their browser settings, though some site features may become unavailable as a result.