Amica Aesthetics

Website: https://www.amicaaesthetics.co.uk/
Last Updated: 1 November 2026

​

1. Introduction

At Amica Aesthetics, protecting your privacy and personal information is an important part of the service we provide.

We are committed to handling personal information responsibly, securely and transparently, particularly where information relates to treatments, consultations or medical history.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, enquire about treatments, book appointments or receive services from Amica Aesthetics.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

 

2. Who We Are

Amica Aesthetics provides professional aesthetics and beauty services.

For the purposes of applicable data protection legislation, the organisation responsible for determining how and why your personal information is processed is:

Business Name: Amica Aesthetics
Legal Entity: AMICA AESTHETICS LIMITED
Business Address: 5 Limewood Approach, Seacroft, Leeds LS14 1AB
Email: pa@amicaaesthetics.co.uk
Website: https://www.amicaaesthetics.co.uk/

Throughout this policy, “Amica Aesthetics”, “we”, “us” and “our” refer to the organisation responsible for your personal information.

 

3. Information We Collect

Depending on how you interact with our business, we may collect the following information.

Personal Information

• Full name

• Date of birth, where required

• Email address

• Telephone number

• Residential or billing address

• Appointment and booking details

• Payment and transaction information

Treatment and Consultation Information

Where relevant to the services provided, we may collect:

• Medical history

• Allergies

• Current medications

• Previous aesthetic treatments

• Relevant health conditions

• Treatment preferences

• Consultation notes

• Treatment records

• Consent forms

• Before-and-after photographs

• Information relating to treatment outcomes and aftercare

Information concerning an individual’s health may constitute special category personal data under UK GDPR and requires additional protection.

Website Information

When you visit our website, we may collect:

• IP address

• Device and browser information

• Website usage information

• Pages visited

• Cookie preferences

• Information submitted through website forms

Marketing Information

Where applicable, we may collect information about your preferences for receiving promotional communications, treatment updates and special offers.

 

4. How We Collect Personal Information

We may collect information when you:

• Visit our website.

• Complete an online enquiry form.

• Book an appointment.

• Contact us by email, telephone or social media.

• Attend a consultation.

• Complete medical or treatment consent forms.

• Receive a treatment.

• Purchase a product or service.

• Subscribe to marketing communications.

• Provide feedback or reviews.

We may also receive relevant information from third-party booking or payment providers where necessary to administer our services.

 

5. How We Use Your Information

We use personal information for the following purposes.

Appointment Management

To arrange appointments, manage bookings, send confirmations and communicate changes to scheduled treatments.

Consultations and Treatments

To assess treatment suitability, identify relevant medical considerations, provide appropriate services and maintain accurate treatment records.

Client Safety

To identify potential contraindications, manage treatment risks, provide aftercare and respond appropriately to treatment-related concerns.

Customer Service

To respond to enquiries, provide information about treatments and communicate with clients.

Payments and Transactions

To process payments, maintain financial records and administer refunds where applicable.

Website Management

To operate, maintain and improve our website, including monitoring website security and functionality.

Marketing

To provide information about services, promotions and business updates where permitted by applicable marketing and data protection legislation.

Legal and Regulatory Compliance

To comply with applicable legal, professional, insurance and regulatory obligations.

 

6. Lawful Bases for Processing Personal Information

Under UK GDPR, we must identify a lawful basis for processing personal information.

Depending on the circumstances, these may include:

Contractual Necessity

Where processing is necessary to provide requested services, manage appointments or fulfil contractual obligations.

Legal Obligation

Where information must be processed or retained to comply with applicable legal requirements.

Legitimate Interests

Where processing is necessary for legitimate business purposes, such as responding to enquiries, managing client relationships, protecting our business and maintaining website security, provided those interests are not overridden by your rights.

Consent

Where you have provided valid consent for specific activities, including certain marketing communications, optional photographs or non-essential cookies.

Where we process special category personal data, including health information, we will also identify a separate condition under Article 9 of UK GDPR.

Depending on the circumstances, this may include explicit consent or another applicable legal condition.

Consent to receive a treatment is separate from consent to process personal data. We will ensure that the appropriate legal basis is identified for each activity.

 

7. Medical Information and Treatment Records

Certain treatments may require us to collect information about your health and medical history.

This information is used to help assess treatment suitability, identify contraindications, maintain appropriate records and support client safety.

We recognise that medical and health-related information requires additional protection.

We take appropriate steps to restrict access to sensitive information and ensure it is only used for legitimate and authorised purposes.

Medical and treatment records will be retained in accordance with applicable legal, professional and insurance requirements.

Where necessary, relevant information may be shared with appropriately authorised healthcare professionals, insurers or regulatory authorities.

We will not use confidential medical information for unrelated marketing purposes without an appropriate legal basis and any additional consent required by law.

 

8. Treatment Photography

We may take photographs before, during or after treatments for purposes such as:

• Maintaining treatment records.

• Monitoring treatment progress.

• Assessing treatment outcomes.

• Supporting consultations and aftercare.

Photographs used for clinical or treatment record purposes will be handled in accordance with our applicable data protection obligations.

Where photographs are intended for marketing, advertising, social media or website publication, we will seek separate, appropriate permission.

You are not required to agree to the promotional use of your photographs as a condition of receiving treatment.

Where promotional processing relies on consent, you may withdraw that consent at any time.

Withdrawal will not affect processing that was lawful before consent was withdrawn. We will explain any practical limitations affecting the removal of material already distributed.

 

9. Online Booking and Payments

Our website is hosted using Wix.

Where online booking, enquiry or payment functionality is available, personal information may be collected to administer your appointment or transaction.

Payments may be processed by third-party payment providers.

These providers may process information necessary to complete transactions, prevent fraud and comply with financial regulations.

We may retain relevant transaction records for accounting, customer service and legal purposes.

 

10. Marketing Communications

We may occasionally communicate information about treatments, products, services, promotions and business updates.

Electronic marketing communications will only be sent where permitted under applicable UK marketing and data protection legislation.

Where required, we will obtain your consent before sending promotional communications.

You can unsubscribe from marketing messages at any time using the unsubscribe instructions provided or by contacting us directly.

Essential appointment confirmations, treatment information and aftercare communications are not treated as promotional marketing solely because they are sent electronically.

 

11. Sharing Your Personal Information

We do not sell your personal information.

We may share relevant information with trusted third parties where necessary to operate our business, provide services or meet legal obligations.

These may include:

• Wix, our website hosting provider.

• Appointment booking platforms.

• Payment processing providers.

• Secure client record management systems.

• Relevant healthcare professionals.

• Professional insurers.

• IT and communication providers.

• Professional advisers.

• Regulatory or legal authorities where required.

We will only share information where there is an appropriate lawful basis and will take reasonable steps to ensure that personal information is protected.

 

12. Website Hosting and Wix

Our website is created and hosted using Wix.

Wix provides website hosting and management functionality and may process information relating to website visitors and customer interactions.

Information submitted through our website may be stored or processed using Wix systems and associated service providers.

For more information about Wix’s privacy practices, please visit:

https://www.wix.com/about/privacy

 

13. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to support essential functionality and improve website performance.

Cookies may also be used for analytics or marketing purposes where applicable.

Where consent is legally required, non-essential cookies will only be activated after appropriate consent has been obtained.

You can manage your cookie preferences through the cookie consent controls available on our website.

For further details, please refer to our Cookie Policy.

 

4. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods depend on the nature of the information and applicable legal, professional, insurance and regulatory requirements.

For example:

• Appointment records may be retained for business administration.

• Financial records may be retained to comply with accounting and tax obligations.

• Consultation and treatment records may be retained for appropriate clinical, professional and insurance purposes.

• Marketing information will be retained in accordance with applicable requirements and your preferences.

When information is no longer required, it will be securely deleted or anonymised.

 

15. Data Security

We take appropriate technical and organisational measures to protect personal information from unauthorised access, accidental loss, misuse, alteration or disclosure.

These measures may include:

• Secure website hosting.

• Password-protected systems.

• Restricted access to client records.

• Secure payment processing.

• Appropriate data storage procedures.

• Access controls for sensitive information.

We take additional care when handling medical information and treatment records.

Although we take reasonable precautions, no electronic system can be guaranteed to be completely secure.

 

16. International Data Transfers

Some third-party providers, including Wix and associated services, may process personal information outside the United Kingdom.

Where personal data is transferred internationally, we will ensure appropriate safeguards are implemented where required under UK data protection law.

These may include UK adequacy regulations or approved contractual safeguards.

 

17. Your Data Protection Rights

Under UK data protection legislation, you may have the right to:

• Access personal information held about you.

• Request correction of inaccurate information.

• Request deletion of personal information in certain circumstances.

• Restrict certain processing activities.

• Object to certain processing activities.

• Request data portability where applicable.

• Withdraw consent where processing relies on consent.

• Challenge certain solely automated decisions where applicable.

These rights are subject to applicable legal requirements and exemptions.

In some circumstances, we may be required to retain treatment or financial records even where deletion has been requested.

To exercise your rights, please contact us using the details provided below.

 

18. Third-Party Links

Our website may contain links to third-party websites or external services.

We are not responsible for the privacy practices or content of those websites.

We encourage visitors to review the privacy policies of external websites before providing personal information.

 

19. Children’s Privacy

Where treatments or services are provided to individuals under 18, we will comply with applicable legal requirements relating to consent, safeguarding and the processing of personal information.

Certain aesthetic treatments are subject to age restrictions under UK law.

We will take appropriate steps to ensure that our services and handling of personal information comply with those requirements.

 

20. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, website functionality, data processing activities or applicable legislation.

Updates will be published on this page with a revised date.

 

21. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Amica Aesthetics
Website: https://www.amicaaesthetics.co.uk/
Email: pa@amicaaesthetics.co.uk
Address: 5 Limewood Approach, Seacroft, Leeds LS14 1AB

You also have the right to raise a concern with the Information Commissioner’s Office (ICO).

Website: https://ico.org.uk/