Privacy Policy

Last Updated: January 2026

Star Aesthetics ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal and sensitive information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

To provide safe and effective aesthetic treatments and training, we collect the following types of data:

Identity Data: Name, date of birth.
Contact Data: Address, email address, phone number.
Medical & Health Data (Special Category Data): Medical history, current medications, allergies, and details of previous aesthetic procedures. This is required for insurance and safety purposes.
Visual Data: "Before and After" photographs of treatment areas (for medical records and, with explicit consent, for marketing).
Transaction Data: Details of payments and services purchased (processed securely via Stripe/banking systems).

2. How We Use Your Data

We use your information strictly to:

Assess your suitability for treatments (Medical Safety).
Perform the agreed aesthetic treatments or training.
Manage appointments and send booking confirmations/reminders.
Comply with insurance and legal record-keeping requirements.
Process payments.

3. Sharing Your Data

We do not sell your data. We may share your data only with:

Insurance Providers: In the event of a claim or medical query.
Training Certification Bodies: If you are a student, your name and details are shared to issue your certificates.
Medical Professionals: In the event of an emergency or referral.

4. Data Security & Retention

All client records are stored securely in compliance with data protection laws. Medical records are retained for a minimum of 7 years as required by insurance and UK law. After this period, data is securely deleted or anonymized.

5. Your Rights

Under UK GDPR, you have the right to:

Request access to the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (subject to our legal obligation to keep medical records for a set period).
Withdraw consent for marketing or photo usage at any time.