Privacy Policy

Aexora London

Effective Date: 1 November 2026

1. Introduction

Aexora London is committed to protecting your privacy and handling your personal information responsibly, transparently and securely.

This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, book an appointment, receive a treatment, purchase skincare products or contact us.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as applicable.

By using our website or services, you acknowledge that you have read this Privacy Policy. Where consent is required for a particular activity, we will request it separately.

2. Who We Are

Aexora London is a UK-based beauty and aesthetics business providing scalp micropigmentation, medical and cosmetic micropigmentation, advanced skin treatments and professional skincare products.

For the purposes of applicable data protection legislation, Aexora London acts as the data controller for personal information processed in connection with its business, except where another party determines the purposes and means of processing.

Business Name: Aexora London

Website: [Insert your website URL]

Email: [Insert your official email address]

Contact: [Insert your official contact details]

If you have questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

3. Personal Information We Collect

Depending on how you interact with Aexora London, we may collect the following categories of personal information.

3.1 Personal and Contact Information

This may include your name, email address, telephone number, billing address, delivery address and other contact details you provide when booking a treatment, placing an order or contacting us.

3.2 Appointment and Consultation Information

When you enquire about or book a treatment, we may collect information relating to your appointment, treatment preferences, consultation notes, relevant communications and treatment history.

3.3 Medical and Health Information

Where necessary for consultation, treatment suitability and client safety, we may collect health-related information such as relevant medical conditions, allergies, medications, skin conditions, previous aesthetic procedures and other information you provide about your health.

Health information is treated as special category personal data under UK data protection law. We process this information only where an appropriate lawful basis and an applicable special category condition are satisfied.

3.4 Purchase and Transaction Information

When you purchase skincare products or pay for a treatment, we may collect details about the products or services purchased, order history, payment status, transaction references and relevant billing information.

Payments may be processed by third-party payment providers. We do not intentionally collect or store full payment card details where these are processed directly by a payment provider.

3.5 Technical and Website Information

When you visit our website, certain information may be collected automatically, including your IP address, browser type, device information, operating system, pages visited, referring website and information about your interactions with our website.

Cookies and similar technologies may also collect information, subject to your preferences and applicable consent requirements.

3.6 Communications and Enquiries

We may retain information contained in enquiries, emails, contact forms, WhatsApp messages and other communications you send to us, where necessary to respond to you, manage our services or maintain appropriate business records.

4. How We Collect Your Information

We collect personal information through several methods, including:

Directly from you when you complete a booking form, consultation questionnaire or contact form.
During consultations and appointments at our clinic.
When you purchase products or services through our website.
Through email, telephone, WhatsApp and other communication channels.
Automatically through website technologies, server logs and permitted cookies.
From service providers or other third parties where lawful and necessary to provide our services.

We aim to collect only the information reasonably necessary for the relevant purpose.

5. How We Use Your Personal Information

We may use your personal information for the following purposes:

Managing enquiries, consultations and appointments.
Assessing treatment suitability and supporting safe treatment delivery.
Maintaining appropriate consultation, treatment and aftercare records.
Processing orders, payments, deliveries, returns and refunds.
Responding to questions, complaints and requests for assistance.
Providing relevant product information and customer support.
Maintaining, securing and improving our website and services.
Preventing fraud, misuse and unauthorised access.
Complying with legal, regulatory, accounting and record-keeping obligations.
Sending marketing communications where permitted by law and, where required, with your consent.

We will not use your personal information for purposes that are incompatible with the purposes for which it was collected unless permitted by applicable law.

6. Our Lawful Bases for Processing

Under UK GDPR, we must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on the following bases:

Contract: Where processing is necessary to fulfil a booking, supply products, process a payment or take steps you request before entering into a contract.

Legal obligation: Where we must process information to comply with applicable laws, regulations or record-keeping requirements.

Legitimate interests: Where processing is necessary for our legitimate business interests, such as managing enquiries, maintaining website security and improving our services, provided those interests are not overridden by your rights and freedoms.

Consent: Where you have freely given consent for a specific purpose, such as certain marketing activities or non-essential cookies.

Vital interests: Where processing is necessary to protect someone’s vital interests in circumstances permitted by law.

Where we process health information, we will also identify and rely on an appropriate condition for processing special category data under UK GDPR and applicable law. This may include explicit consent or another applicable condition, depending on the purpose and circumstances.

Where consent is relied upon, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Medical and Treatment Information

We understand that medical and treatment-related information is particularly private and sensitive.

We use this information only where necessary and lawful, including to assess treatment suitability, identify relevant risks, plan appropriate procedures, provide aftercare and maintain necessary treatment records.

Access to this information is restricted to authorised individuals who need it for legitimate professional or operational purposes.

We will not use your medical information for unrelated marketing purposes without an appropriate lawful basis and any additional consent required by law.

8. Sharing Your Personal Information

We do not sell your personal information to third parties.

We may share relevant information with trusted third parties where necessary and lawful, including:

Website hosting and website maintenance providers.
Appointment booking and clinic management platforms.
Payment processors and e-commerce service providers.
Delivery and fulfilment companies.
IT support, security and communications providers.
Professional advisers, insurers and auditors where appropriate.
Regulatory authorities, law enforcement agencies or other public bodies where disclosure is legally required or otherwise permitted.

Where third parties process personal information on our behalf, we take appropriate steps to ensure suitable contractual and security arrangements are in place.

We disclose only the information reasonably necessary for the relevant purpose.

9. International Data Transfers

Some of our service providers may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection legislation. Depending on the circumstances, this may involve transferring information to a country recognised as providing adequate protection or implementing an appropriate safeguard, such as an approved contractual mechanism.

You may contact us for further information about relevant international transfers and the safeguards used.

10. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing treatments, managing orders, maintaining appropriate records and meeting legal obligations.

Retention periods may vary depending on the type of information and the circumstances.

For example:

Appointment and consultation records may be retained for appropriate clinical, safety, legal and insurance purposes.
Transaction and accounting records may be retained for the period required by applicable law.
Enquiry and customer service records may be retained for as long as necessary to resolve the enquiry and maintain relevant business records.
Marketing information may be retained until you withdraw consent, object where applicable or the information is no longer needed.

When information is no longer required, we will take reasonable steps to delete it securely or anonymise it, subject to any legal retention obligations.

11. Data Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

Depending on the circumstances, these measures may include access controls, password protection, secure systems, restricted staff access and appropriate safeguards when working with service providers.

However, no method of transmitting or storing information electronically is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

If a personal data breach occurs, we will respond in accordance with applicable legal requirements, including notifying affected individuals or the relevant authority where required.

12. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, remember preferences, understand website performance and, where enabled, support analytics or marketing.

Cookies may include:

Essential cookies: Necessary for core website functions, security or requested services.

Preference cookies: Used to remember settings and preferences.

Analytics cookies: Used to understand how visitors interact with our website, where permitted.

Marketing cookies: Used to support advertising or measure marketing effectiveness, where applicable and permitted.

Where required by law, we will obtain your consent before placing non-essential cookies or using similar technologies. You can manage your preferences through our cookie consent tool, where available, and through your browser settings.

Disabling certain cookies may affect some website functions.

13. Marketing Communications

We may send information about our treatments, skincare products, offers or clinic updates where permitted by applicable law.

Where consent is required, we will obtain it before sending marketing communications. In certain circumstances, applicable electronic marketing rules may allow marketing without separate consent, subject to the relevant conditions and your right to object.

You can unsubscribe from marketing emails using the unsubscribe link provided or contact us directly to request that marketing communications stop.

We will continue to send necessary non-marketing communications relating to your appointments, purchases, payments or other existing transactions where appropriate.

14. Your Data Protection Rights

Subject to applicable law and any relevant exemptions, you may have the right to:

Access: Request a copy of the personal information we hold about you.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Request deletion of your personal information in certain circumstances.
Restriction: Ask us to restrict the processing of your information in certain circumstances.
Data portability: Request certain information in a structured, commonly used and machine-readable format where the legal requirements are met.
Object: Object to processing based on legitimate interests and to direct marketing.
Withdraw consent: Withdraw consent where processing is based on your consent.
Complain: Lodge a complaint with the relevant data protection supervisory authority.

These rights are not absolute and may be subject to legal conditions and exemptions.

To exercise your rights, please contact us using the contact details provided in this policy. We may need to verify your identity before responding to your request.

15. Children’s Privacy

Our website and services are not intended to collect children’s personal information unnecessarily.

Where a treatment or service may be available to an individual under 18, we will consider applicable legal requirements, treatment-specific safeguards and any necessary parental or guardian involvement.

We do not knowingly collect personal information from children through our website for unrelated purposes. If you believe a child has provided personal information inappropriately, please contact us so we can assess the matter.

16. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, booking systems or payment services.

These external websites and services operate under their own privacy policies and terms. We are not responsible for their privacy practices or content.

We recommend reviewing the relevant privacy policy before submitting personal information to a third-party website or service.

17. WhatsApp and Other Communication Channels

If you contact Aexora London through WhatsApp or another third-party messaging service, your communications may be processed by that service provider in accordance with its own privacy policy and terms.

Please avoid sending unnecessary sensitive medical information through communication channels that may not be appropriate for detailed health information. Where necessary, we may direct you to a more suitable method for providing treatment-related information.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, technology or legal obligations.

Any revised version will be published on this page with an updated effective date.

We encourage you to review this page periodically to understand how your personal information is handled.

19. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your personal information is processed, please contact us.

Aexora London

Website: [Insert your website URL]

Email: [Insert your official email address]

Telephone: [Insert your official telephone number]

WhatsApp: [Insert your official WhatsApp number]

We will review your request and respond within the timeframe required by applicable data protection law.

Effective Date: 1 November 2026

Last Updated: 1 November 2026