Privacy policy

Who we are

Tayla'd Aesthetics Ltd is the data controller for personal information collected through this website, at consultations and through the online course.

Questions or requests can be sent to hello@tayladaesthetics.co.uk.

What we collect

Enquiries: your name, email address, phone number (if given) and the message you send us.

Course accounts: your name, email address, password (stored encrypted by our authentication provider), lesson progress, assessment attempts and scores.

Payments: purchase records including amount, currency, date and a payment reference. Card details are handled entirely by Stripe.

Treatments: consultation and treatment records, including relevant health information and, where you have given separate written consent, before-and-after photographs.

Technical data: IP address and basic device or browser information created automatically when you use the site.

Why we use it and our lawful bases

To answer enquiries and arrange appointments (legitimate interests, or steps towards a contract).

To deliver the online course, your account, progress tracking and certificate (performance of a contract).

To keep treatment and consent records, which we hold to meet professional, insurance and legal obligations (legal obligation and legitimate interests; health information is processed with your explicit consent).

To keep the website secure and working correctly (legitimate interests).

To send marketing only where you have asked us to. You can withdraw consent at any time.

Who we share it with

Service providers who process data on our behalf: our website and database hosting, our authentication provider and Stripe for payments.

Professional advisers, insurers or regulators where we are legally required or permitted to share information.

We never sell your personal information.

How long we keep it

Enquiries: up to two years after your last contact with us.

Course accounts and purchase records: for the length of your access plus the period we must keep financial records (currently six full financial years).

Treatment and consent records: for the retention period required by our professional and insurance obligations.

Photographs: until you withdraw consent, after which they are removed from future use.

Security

Access to your data is restricted to accounts that need it, protected by authentication and database-level access rules, and transmitted over encrypted connections.

Your rights

You have the right to access a copy of your information, to have inaccurate information corrected, to ask for erasure or restriction, to object to processing based on legitimate interests, to data portability, and to withdraw consent where consent is the basis we rely on.

To exercise any of these rights, email hello@tayladaesthetics.co.uk. We will respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

This website uses only the cookies and local storage needed to keep you signed in and to remember basic preferences. No advertising or third-party tracking cookies are set. If analytics are added in future, this policy will be updated first.