All information collected is treated as confidential and protected in line with data protection law. I use it to reply to you, to book and carry out your treatment, and for medical and insurance purposes. Your information is never sold, and it is only shared where your care or the running of the clinic needs it. If you join my mailing list, you can unsubscribe at any time using the link in any of my marketing emails.
The sections below give the detail, if you’d like it.
Who I am
Aesthetics by Hayley is the trading name of Juniper Productions Limited, a company registered in England and Wales, company number 09263193. I am Hayley Ford, the company’s director, and I run the clinic myself. The company is the data controller for your personal information: it decides how your information is used and is responsible for looking after it. It is registered with the Information Commissioner’s Office (ICO), registration number ZC273771.
Contact me about anything in this notice by email at info@aestheticsbyhayley.co.uk, by phone on 07824 367575, or by post at Aesthetics by Hayley (Located within Minsony), 260 Pentonville Road, London N1 9JY.
What I collect and why
When you use the contact form
The form asks for your name, email address, phone number and message. I use them only to reply to you, and I delete messages after 12 months unless you go on to book. To block spam, the form also keeps a scrambled (hashed) version of your IP address for one hour.
When you book
Bookings are handled by Ovatu, my online booking system. Ovatu collects your name, contact details and the appointment you choose, and passes them to me so I can see you. Card payments, including deposits, are processed by Stripe through Ovatu. I use this information to provide the treatment you have booked. Ovatu and Stripe each have their own privacy notice; Stripe’s is at stripe.com/gb/privacy.
When you message me on WhatsApp
If you message me on WhatsApp, I see your phone number, your profile name and whatever you send. I use it to reply and to arrange your appointments. WhatsApp is run by Meta, and its own privacy policy covers how it handles your messages.
Your consultation and treatment records
I record your medical history, consultation, consent and the details of each treatment, including the products used. Health information is special category data under the law, so I only collect it with your explicit consent, given when you complete your forms. I may take photos of the treated area for your record. I will only use a photo of you on my website or social media with your separate written consent, which you can withdraw at any time.
When you visit this website
Google Analytics and Meta advertising cookies are only used if you accept them. See cookies below.
Who I share it with
Only the services that help me run the clinic, each with its own data protection policy: my booking and card payment systems, my email and mailing list provider, the company that hosts this website and, if you accept cookies, analytics and advertising services. Where it’s needed, I also share relevant details with a medical professional involved in your care, with my insurer or professional advisers, or with anyone the law requires me to.
I never sell your information. Some of these services may handle data outside the UK. When they do, they use the safeguards UK law requires.
Your rights
Under UK GDPR, you can ask me to:
- give you a copy of the information I hold about you
- correct anything that is wrong
- delete your information, where I do not have to keep it
- limit how I use it, or stop using it
- send it to you in a format you can take elsewhere
Where I rely on your consent, you can withdraw it at any time. To use any of these rights, email me. I will reply within one month, and in most cases there is no charge.
If you are unhappy with how I have handled your information, please tell me first and I will try to put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Cookies
Cookies are small files a website stores on your device. This site sets one cookie of its own. With your consent, it also uses Google Analytics to see how people use the site, and Meta cookies to measure my adverts. Neither loads until you accept in the cookie banner.
| Cookie | What it does | How long it lasts |
|---|---|---|
abh_consent | Remembers your cookie choice, so the banner does not ask again | 6 months |
_ga | Google Analytics: tells one visitor from another | 2 years |
_ga_* | Google Analytics: keeps track of your visit | 2 years |
_fbp | Meta: measures visits that come from my adverts | 3 months |
lastExternalReferrer, lastExternalReferrerTime | Meta, only if you accept cookies: remembers which website sent you here, to measure my adverts. Kept in your browser’s storage rather than as a cookie | Until you clear your browser’s storage |
abh_look | Only if you accept cookies, and only while I compare two colour schemes for the site: remembers which one you were shown, so it stays the same on every visit, and tells Google Analytics which one it was. Kept in your browser’s storage rather than as a cookie | Until the comparison ends |
The booking page shows Ovatu’s booking system, which may set its own cookies; Ovatu’s privacy notice explains them. The map on the Contact page comes from Google Maps. When it loads, Google receives your device’s internet address; Google’s privacy policy explains how Google uses it. You can change your cookie choice at any time using the cookie settings link at the bottom of every page.
This notice was last updated in October 2026.