Privacy Policy

1. Introduction

Cells Aesthetics ("we", "us", or "our") is operated by AVL Health Limited. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Data Controller: AVL Health Limited
Address: 193 Portland Road, Hove, Brighton BN3 5JA
Email: info@cellsaesthetics.co.uk
Phone: 07595 749822

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Book a consultation or treatment
• Contact us via phone, email, or WhatsApp
• Subscribe to our newsletter or marketing communications
• Complete forms on our website
• Interact with us on social media

This information may include: name, email address, phone number, date of birth, medical history relevant to treatments, treatment preferences, and payment information.

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on pages
• Referring website addresses
• Analytics data via Google Analytics 4

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing Services: To deliver aesthetic treatments and manage your appointments
• Communication: To respond to your inquiries and provide customer support
• Medical Records: To maintain accurate treatment records and ensure safe, effective care
• Marketing: To send you promotional materials, offers, and updates (with your consent)
• Website Improvement: To analyze website usage and improve user experience
• Legal Compliance: To comply with legal obligations and protect our rights

4. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Consent: When you have given explicit consent (e.g., marketing communications)
• Contract Performance: When processing is necessary to provide our services
• Legal Obligation: When required by law (e.g., medical records retention)
• Legitimate Interests: When necessary for our business operations, provided your rights are not overridden

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (e.g., booking systems, payment processors, email services)
• Medical Professionals: When necessary for your treatment or with your consent
• Legal Authorities: When required by law or to protect our rights
• Insurance Companies: If you claim treatment through insurance (with your consent)

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure data storage and transmission (SSL/TLS encryption)
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:

• Medical Records: Retained for 8 years after your last treatment (as per UK medical regulations)
• Marketing Data: Until you withdraw consent or we no longer have a legitimate interest
• Financial Records: Retained for 6 years (as per UK tax law)

8. Your Rights Under GDPR

As a data subject in the UK/EU, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restriction: Request limited processing of your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing at any time

To exercise any of these rights, please contact us at info@cellsaesthetics.co.uk

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your website experience and analyze usage. We respect your browser's Do Not Track (DNT) settings and Global Privacy Control (GPC) signals.

Analytics: We use Google Analytics 4 to understand how visitors use our website. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., social media, booking systems). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):