Privacy Policy.
This policy explains what personal data Aesthetics Marketing System collects, how we use it, who we share it with, and the rights you have under UK GDPR and the Data Protection Act 2018. We've tried to write it in plain English. If anything is unclear, email contact@aestheticsmarketingsystem.com.
1. Who we are
Aesthetics Marketing System ("we", "us", "our") is the data controller for personal data collected through this website (https://aestheticsmarketingsystem.com). We work UK-wide and remotely, without a physical office.
Contact for data-protection matters: contact@aestheticsmarketingsystem.com.
2. What information we collect
2.1 Information you give us
- Booking a call. Every "Book a 30-minute call" button on this site opens a
booking calendar at
links.resoclinx.com, which runs on GoHighLevel, the booking and customer-relationship software we use. When you book, you give us the details that form asks for, such as your name, email address and phone number, and the time you chose. The booking system uses them to confirm the call and remind you about it. - Contact form. The form on the contact page collects your name, email address and message. Alongside it we record the time you sent it, your browser's user-agent string and the country your connection comes from.
- Email. If you email us directly, we receive your email address and whatever you choose to write.
2.2 Information collected automatically
- Hosting and security. The site is hosted on Cloudflare, which processes technical information such as your IP address, the page requested, the referrer and your user agent to serve the site and protect it from abuse.
- Spam protection on the contact form. The form uses Cloudflare Turnstile to check that a person, not a bot, is sending it. To stop repeated spam, your IP address is held for one hour to count how many messages come from it.
- Google Analytics 4. With your consent, we use Google Analytics to see which pages are useful and which buttons get used. If you decline in the cookie banner, no analytics cookies are set; Google Consent Mode may still send Google a cookieless signal that a page was viewed, with no identifier attached.
2.3 Cookies
See the Cookie Policy for the full list. Short version: analytics cookies are set only if you accept them, and there are no advertising cookies.
3. How and why we use your information
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Arranging and holding a call you booked, including confirmations and reminders | Article 6(1)(b): steps you asked us to take before any contract |
| Replying to your messages and general correspondence | Article 6(1)(f): our legitimate interest in answering people who contact us |
| Understanding which pages are useful (Google Analytics) | Article 6(1)(a): your consent, which you can withdraw at any time |
| Keeping the site secure and stopping spam | Article 6(1)(f): our legitimate interest in protecting the service |
| Complying with legal or regulatory obligations | Article 6(1)(c): legal obligation |
We don't add you to a marketing list because you booked a call or sent a message. We do not sell or rent your personal data to anyone, for any purpose.
4. Who we share your information with
We share your data only with the service providers we need to run the website, and they process it on our instructions:
- Cloudflare, Inc. (United States): hosts the site, runs the Turnstile spam check and stores contact-form messages.
- Resend, Inc. (United States): delivers the email that tells us a contact-form message has arrived.
- HighLevel, Inc. (GoHighLevel, United States): runs the booking calendar and holds the details you give when you book a call.
- Google: provides Google Analytics, only if you accept analytics cookies.
5. International transfers
Some of these providers are based in the United States. Where data leaves the UK, we rely on the UK Extension to the EU-US Data Privacy Framework or on Standard Contractual Clauses with the UK addendum to keep it protected. You can ask us for details by email.
6. How long we keep your information
- Contact-form messages: 2 years from when you send them, then deleted automatically
- IP addresses used for spam protection: 1 hour
- Booking details: as long as needed to arrange and follow up the call, and deleted on request
- Email correspondence: as long as needed to keep the conversation going, and deleted on request
- Google Analytics data: for the retention period set in our Google Analytics account
- Newsletter or marketing list: we don't run one
7. Your rights under UK GDPR
You have the right to:
- Access: ask for a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate or incomplete data
- Erasure: ask us to delete your data
- Restriction: ask us to limit how we use your data
- Portability: receive your data in a machine-readable format
- Object: to processing based on legitimate interests
- Withdraw consent: where we rely on consent, such as analytics cookies
- Complain to the ICO: the Information Commissioner's Office, the UK regulator, at ico.org.uk
8. How to exercise your rights
Email contact@aestheticsmarketingsystem.com with the subject "Data request" and tell us what you'd like us to do. We aim to respond within one month, as UK GDPR requires.
9. Children's data
This site is for aesthetic clinic owners. It is not aimed at anyone under 18, and we do not knowingly collect personal data from children.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows the latest version. If we make significant changes to how we use your data, we'll tell affected people by email where we reasonably can.
11. Contact
Questions, requests or complaints about this policy or how we handle data: contact@aestheticsmarketingsystem.com