Privacy Policy

1. Who we are

AL Medical Aesthetics & Wellness Ltd is the controller responsible for personal information collected through this website and our clinic services.

AL Medical Aesthetics & Wellness Ltd
Company number 11783098
68 Albany Road
Bramhall, Stockport
SK7 1NE

We are registered with the Information Commissioner's Office under reference ZA492046. For privacy questions or to exercise your rights, email info@almedicalwellness.co.uk.

2. What this policy covers

This policy covers personal information collected when you:

• browse this website;
• send a website enquiry or ask for a callback;
• book or manage an appointment through our booking provider;
• join or leave our mailing list; or
• choose to allow analytics cookies.

Clinical records created when you become a patient are also governed by our clinical confidentiality, consent and records-management procedures. Those records may need to be kept for longer than a general website enquiry.

3. Information we collect

Information you give us

• your first and last name, email address and optional telephone number;
• the subject and content of an enquiry;
• whether you have asked us to call you back;
• mailing-list choices and the date and time of your consent;
• booking and appointment information entered through Pabau; and
• correspondence you send by email, telephone or another channel.

Health information in enquiries

You may choose to include information about your health in an enquiry. Health information is special category data and receives additional protection. We use information you deliberately include with your explicit consent so that our clinical team can understand and respond to your request. Where relevant, it may also be processed for the provision or management of health care by, or under the responsibility of, a health professional.

Please do not use the general enquiry form for urgent medical help or provide more medical detail than is needed for your initial question.

Technical information

Our hosting and security services may receive your IP address, browser and device type, requested pages, timestamps, referrer information and security events. If you accept analytics cookies, Google Analytics also receives cookie identifiers and information about how you use the site.

4. Why we use your information

5. Who receives your information

We do not sell personal information. We use suppliers only where needed to operate the website and clinic:

• Cloudflare provides website hosting, media storage, database, security, Turnstile spam protection and website enquiry email delivery.
• HighLevel and LeadConnector receive website enquiries for lead management and follow-up.
• Pabau, operated by Hambrand Technology Limited, manages leads, bookings, mailing-list contacts and clinic records.
• Google provides consent-gated Google Analytics, embedded maps and web fonts.

We may also disclose information to professional advisers, insurers, courts, regulators, law enforcement or safeguarding bodies where the law permits or requires it.

6. International transfers

Pabau states that data for UK customers is stored and processed in UK data centres. Some other suppliers may process information outside the UK. Where a restricted transfer takes place, we require an approved safeguard such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses.

Supplier information is available from Cloudflare , HighLevel , Pabau and Google.

7. How long we keep information

• General enquiries are kept for up to 24 months. If you become a patient, relevant information may become part of your clinical record and follow the clinic's clinical retention policy.
• Routine website and security logs are kept for up to 30 days, unless they are needed for investigation or legal purposes.
• Google Analytics user-level and event-level data is configured for up to 14 months. Aggregated reports may remain available for longer.
• Mailing-list information is kept while you remain subscribed. After you opt out, we retain only the minimal suppression and consent record needed to respect your choice and demonstrate compliance.

We may retain information longer where required for clinical records, safeguarding, tax, regulatory duties, dispute resolution or legal claims.

8. Cookies and similar technologies

Essential technologies may be used to provide security, remember your privacy choice and deliver services you request. They do not require consent where they are strictly necessary.

Google Analytics is non-essential and loads only after you accept analytics cookies. You can decline without losing access to the website and can change your choice using Cookie settings in the website footer. Embedded Google Maps may also receive technical information or use cookies when you choose to load or interact with a map.

Analytics consent preference

When Google Analytics is configured, this site uses the first-party cookie al_analytics_consent to remember whether you accepted or declined analytics. It contains only a versioned preference, lasts for 90 days and is restricted to this website with Path=/, SameSite=Lax and Secure attributes. It is necessary to remember and respect your privacy choice; it does not identify you to Google.

Google Analytics cookies beginning _ga are created only after acceptance. Withdrawing through Cookie settings disables analytics and removes those cookies from this site.

9. Mailing-list choices

We send marketing only where you have actively opted in. You can withdraw consent at any time using the unsubscribe link in a message or by contacting us. Withdrawing consent does not affect processing that was lawful before withdrawal.

10. Your data protection rights

Depending on the circumstances, you may have the right to:

• ask for a copy of your personal information;
• correct inaccurate or incomplete information;
• ask us to delete or restrict the use of information;
• object to processing based on legitimate interests or direct marketing;
• receive certain information in a portable format; and
• withdraw consent at any time.

These rights are not absolute and may be limited by clinical, regulatory or legal record-keeping duties. Contact info@almedicalwellness.co.uk to make a request.

11. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office , the UK regulator for data protection.

12. Children

This website is not intended for children to submit enquiries or join the mailing list without the involvement of a parent or guardian. Clinical services for anyone under 18 are handled under separate age, consent and safeguarding procedures.

13. Automated decisions

We do not use information collected through this website to make solely automated decisions that produce legal or similarly significant effects.

14. Security and policy changes

We use appropriate technical and organisational measures to protect personal information. No online service can be guaranteed completely secure.

We review this policy when our services, suppliers or legal obligations change. The current version and its last-updated date will always appear on this page.