Privacy policy

Last updated: 2 October 2026

Aesthetics Clinical Standards (“ACS”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, make a consultancy enquiry, communicate with us, purchase products or digital resources, or otherwise interact with Aesthetics Clinical Standards.

Aesthetics Clinical Standards is the data controller for the personal information described in this Privacy Policy, except where another organisation acts as a separate controller for its own processing.

Our website and online store are powered by Shopify.

Information We Collect

The information we collect depends on how you interact with ACS.

Consultancy enquiries

If you submit a consultancy enquiry through our website, we may collect:

your name;
your email address;
your business or clinic name, if provided;
your telephone number, if provided;
your town or area, if provided;
the areas of support you select, if any; and
information you choose to include in your message.

Your name and email address are required so that we can receive and respond to your enquiry. The other enquiry fields are optional.

The initial enquiry form is intended for general business enquiries. Please do not include patient-identifiable information, medical records or other unnecessary sensitive or confidential information in the enquiry form.

If an enquiry progresses to consultancy work, we may subsequently agree appropriate and secure arrangements for reviewing governance information or evidence where this is necessary for the work being undertaken.

Purchases and orders

If you purchase a physical product, digital download or other resource from our store, we may collect or process information including:

your name;
email address;
billing and, where applicable, delivery address;
telephone number where provided or required;
details of the products or resources purchased;
order, transaction and payment information; and
information relating to delivery, returns, refunds or customer service.

Payments may be processed by Shopify and/or relevant payment providers. ACS does not need to receive your complete payment card details in order to fulfil your order where these are processed securely by the payment provider.

Communications

If you contact us by email or another available communication method, we may retain your contact details and the contents of the communication where necessary to respond to you and maintain an appropriate business record.

Website, device and usage information

When you use our website, certain technical information may be collected automatically, including your IP address, browser or device information and information about how you interact with the website.

Cookies and similar technologies may also be used. Where consent is required for non-essential cookies, these will not be used for those purposes unless you make the relevant choice through our cookie controls.

Why We Use Your Information

We may use your personal information to:

respond to consultancy enquiries and discuss services you have asked us about;
provide consultancy or other services you have requested;
process and fulfil purchases of physical products and digital resources;
process payments, deliveries, returns and refunds;
provide customer service and communicate with you about enquiries, services or orders;
operate, maintain and improve our website and online store;
maintain appropriate business, financial and transaction records;
protect the security of our website, customers and business and help prevent fraud or misuse;
comply with legal, regulatory, tax, accounting or insurance requirements; and
establish, exercise or defend legal claims where necessary.

We will only use personal information for marketing where we have an appropriate lawful basis to do so. Where marketing requires your consent, you can withdraw that consent at any time.

Our Lawful Bases

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract — where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you, for example responding to a request for consultancy services or processing an order.

Legitimate interests — where processing is reasonably necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This may include responding to business enquiries, maintaining appropriate business records, improving our services and protecting the security of our business.

Legal obligation — where we need to process or retain information to comply with a legal requirement, including applicable tax, accounting or regulatory obligations.

Consent — where we ask for and rely upon your consent, for example for certain marketing activities or non-essential cookies where consent is required. You may withdraw consent at any time, although this does not affect processing carried out lawfully before withdrawal.

In limited circumstances, another lawful basis permitted by data protection law may apply.

How We Obtain Personal Information

We may obtain personal information:

directly from you when you make an enquiry, purchase something, contact us or otherwise provide information;
automatically when you use our website, including through cookies and similar technologies;
from Shopify and other providers that support the operation of our website, store and transactions; and
from another legitimate source where necessary for providing services or complying with our obligations.

How We Share Information

We do not sell your personal information.

We may share personal information where necessary with organisations that help us operate ACS and provide our services, including:

Shopify;
payment processors;
website, IT, email and cloud service providers;
delivery or fulfilment providers where physical products are purchased;
professional advisers such as accountants, insurers or legal advisers where appropriate; and
regulators, public authorities or law-enforcement bodies where disclosure is required or permitted by law.

We only share information where there is an appropriate reason to do so and seek to limit information to what is necessary for the relevant

Shopify

Our website and online store are hosted by Shopify. Shopify processes information about your access to and use of our website and store in order to provide its services to ACS.

Shopify Network Intelligence is enabled for our store. This means Shopify may use information from your interactions with ACS, other Shopify merchants and Shopify to provide and improve enhanced services, including features relating to personalisation, analytics, security, advertising and the operation and improvement of Shopify services.

Information may therefore be shared with and processed by Shopify and relevant service providers, including organisations located outside the United Kingdom, where appropriate safeguards are used as required by applicable data protection law.

Shopify may act as a processor on our behalf for certain activities and may process information for its own purposes in circumstances described in its privacy information.

You can find further information about how Shopify processes information in Shopify’s Consumer Privacy Policy.

International Transfers

Some of the organisations that provide technology or other services to us may process information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required by UK data protection law. These may include adequacy regulations or approved contractual safeguards.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, contractual, accounting, insurance or regulatory requirements.

For consultancy enquiries that do not become client work, we will ordinarily delete the enquiry information 12 months after the last meaningful contact, unless there is a documented and proportionate reason to retain it for longer.

Where an enquiry becomes client work, relevant information may need to be retained for a longer period in accordance with our contractual, legal, professional, insurance or record-keeping requirements.

Order and transaction records may also be retained for the periods necessary to comply with applicable tax, accounting, consumer and other legal obligations.

Security

We take reasonable organisational and technical measures to protect personal information.

However, no method of electronic transmission or storage can be guaranteed to be completely secure. Please do not send patient-identifiable information, medical records or other unnecessary sensitive information through the general website enquiry form.

Where consultancy work requires the review of governance evidence containing sensitive or confidential information, appropriate arrangements will be considered separately.

Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

request access to personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your personal information in certain circumstances;
ask us to restrict the processing of your information in certain circumstances;
object to certain processing;
receive certain personal information in a portable format where applicable; and
withdraw consent where we rely on consent.

These rights are not absolute and may be subject to legal exemptions.

You will not normally have to pay a fee to exercise your data protection rights. We may need to request information to confirm your identity before responding to a request.

Marketing

Where we offer marketing communications, you can choose whether to receive them.

You can unsubscribe from marketing emails at any time using the unsubscribe facility provided in the communication or by contacting us.

Service communications relating to an enquiry, contract, purchase or order are not marketing communications and may still be sent where necessary.

Our website uses cookies and similar technologies for functions such as operating the website, security, remembering choices and, where permitted, analytics, advertising or personalisation.

Where consent is required, you can accept, decline or manage non-essential cookies through the cookie banner and cookie preference controls.

You can change your choices using the cookie preference facilities available on the website.

Children’s Information

Our website, consultancy services and business resources are not directed at children.

We do not knowingly seek to collect children’s personal information through our general website or consultancy enquiry form.

Third-Party Websites

Our website may contain links to third-party websites or services.

Those organisations are responsible for their own privacy practices. We recommend reviewing their privacy information before providing personal information to them.

Complaints

If you have a concern about how we use your personal information, please contact us first so that we have an opportunity to address it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Information about your data protection rights and making a complaint is available from the Information Commissioner’s Office.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, business practices or legal and regulatory requirements.

When we make changes, we will update the “Last updated” date shown at the top of this policy and provide any additional notice required by law.

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have a privacy concern, please contact:

Aesthetics Clinical Standards
Email: hello@aestheticsclinicalstandards.co.uk
Address: 36 Rydal Avenue, Ramsgate, CT11 0PX, United Kingdom

For the purposes of applicable UK data protection law, Aesthetics Clinical Standards is the data controller for the personal information described in this Privacy Policy.

Your cart is empty

Privacy policy

Aesthetics Clinical Standards