Privacy Policy

Who is responsible

Grace Aesthetics is the controller for website enquiries. Contact hello@graceaesthetics.co.uk or write to 45 High St, Bozeat, Wellingborough NN29 7NF.

Website enquiries

The contact form asks for your name, email address, telephone number, treatments of interest and message. The chat enquiry form asks for your name, telephone number and message. Technical information such as your IP address may also be processed to deliver and protect these services.

We use enquiry information to respond to you and discuss the services you requested. Where you ask about a possible booking, the lawful basis is taking steps at your request before entering a contract. Our legitimate interests in operating a secure website and responding to general correspondence cover related administration and security.

Website enquiries may receive an automated SMS reply sent through RomanReviews.

Please do not put health information, photographs of medical conditions or payment details in either website form. Enquiry information is not an invitation to send marketing messages.

Bookings and sensitive information

Booking links take you to Fresha, where booking, deposit and payment information is handled under its own privacy notice and the clinic’s booking arrangements. Card details are not collected by this website.

Health histories and treatment records are separate from ordinary website enquiries. If health information is needed for a consultation, the clinic must explain the purpose, retention and applicable Article 9 condition when collecting it, and obtain explicit consent where that is the condition relied on. This is separate from any consent to marketing or optional photography.

Services involved

Replit hosts the website. Formspree delivers contact-form and chat enquiries. Fresha provides the external booking and payment service. Email correspondence passes through the clinic’s email service. If you choose WhatsApp, your conversation uses WhatsApp (Meta). The clinic does not sell website enquiry information.

The map requests map tiles from OpenStreetMap. Google Fonts supplies the website fonts. Requests to these services can include your IP address and browser information. They are not used here to run advertising or analytics.

Some providers may process information outside the UK. Their applicable privacy notices and contractual terms describe processing locations and transfer safeguards. The clinic should confirm the relevant arrangements before transferring treatment records; this notice does not claim a safeguard that has not been verified.

Keeping information

Enquiries are held in the form service and the clinic’s correspondence systems, not in a website client-record database. Contact the clinic for the retention period applicable to your enquiry or treatment records. Specific clinical and correspondence retention schedules are not set by this website.

You can ask for deletion of enquiry information. The clinic will consider any legal obligation or other lawful reason to retain it and explain its response.

Your rights and complaints

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your information, object to processing, or withdraw consent. Contact hello@graceaesthetics.co.uk and identify the information or request concerned. Identity checks may be needed before information is released.

Raise a data-protection complaint with the same email address, using “Data protection complaint” as the subject. Explain what happened and the outcome you seek. You may ask for the matter to be reviewed if you remain unhappy. Statutory response requirements apply; this notice does not create a different clinic response deadline.

You may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/ or call 0303 123 1113. You do not lose that right by contacting the clinic first.

The website enquiry forms do not make automated treatment decisions.