privacy

GDPR Privacy Statement

Diyah Aesthetics

GDPR Privacy Statement

Diyah Aesthetics

Introduction

At Diyah Aesthetics, we are committed to protecting and respecting your privacy. This Privacy Statement explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

1. Who We Are

Diyah Aesthetics operates as the data controller, meaning we determine the purposes and methods of processing your personal data. For any questions regarding this statement, please contact us at

2. What Information We Collect

We may collect and process the following personal data:

Contact Information: Name, email address, phone number, and postal address.

Booking Information: Appointment details and treatment preferences.

Payment Details: Information required for processing transactions.

Website Usage Data: IP address, browser type, and activity on our website via cookies.

Medical Information: Relevant medical history required for treatment purposes.

3. How We Use Your Data

Your data is used for the following purposes:

To manage your appointments and provide treatments.

To communicate with you regarding services or updates.

To process payments and issue receipts.

To comply with legal obligations.

To improve our website and services.

We will never sell or share your data for marketing purposes without your explicit consent.

4. Legal Basis for Processing

We process your data under the following legal bases:

Consent: When you provide permission for marketing communications.

Contractual Necessity: To deliver the services you have requested.

Legal Obligation: To comply with applicable laws.

Legitimate Interests: For business operations, such as improving services.

5. Data Sharing

We may share your data with trusted third parties, such as:

Payment processors to complete transactions.

Medical professionals where required for treatment purposes.

Legal authorities if required by law.

All third parties are GDPR-compliant and handle your data securely.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this statement or as required by law.

7. Your Rights

Under GDPR, you have the right to:

Access your data and request a copy.

Rectify any inaccuracies in your data.

Request the erasure of your data (“right to be forgotten”).

Restrict or object to the processing of your data.

Request data portability.

Withdraw consent for data processing at any time.

Lodge a complaint with The Real Age Test (https://www.sculptedbykamila.com/) Information Commissioner’s Office (ICO) in the UK.

8. Cookies

Our website uses cookies to enhance user experience. You can control cookies through your browser settings.

9. Security Measures

We implement robust security measures to protect your data against unauthorised access, alteration, or disclosure.

10. Updates to This Statement

We may update this Privacy Statement periodically. Any changes will be posted on this page with the effective date.

Luxury aesthetic treatments in Richmond and Marylebone, delivered with precision, discretion and clinical expertise.

Natural-looking results, ethical practice and bespoke treatment plans tailored entirely to you.