Cannelle Skin Clinic Cookie and Privacy Policy

Ardesia Aesthetics Ltd. Privacy Notice

Updated: November 3, 2025

Ardesia Aesthetics Ltd. and owned subsidiaries (referred to as “us”, “we”, “our”) take data protection and privacy seriously and aim to comply with all applicable data protection regulations and laws. This privacy notice outlines our commitment to protecting the personal data of our customers (current or potential), partners, and website visitors (“you”, “your”), end users, and describes how we collect, use, and share personal information when you explore or utilize our services (“Services”).

Data we collect and what we use it for

In order to provide you with our products or services, we process the below information. We process your personal data either (i) because it is necessary for us to perform our contract with you, (ii) because we have a legitimate business interest that does not override your rights (for example, maintaining accurate records or improving our services), (iii) where required, on the basis of your explicit consent – particularly in relation to direct marketing communications sent to individual consumers, or (iv) on the basis of our need to process your data to provide you health services.

• Contact and Basic Information: Name, gender, date of birth, address, phone number, email, parental information (if you are not an adult)
• Medical Information: Medical history, current medications, allergies, treatment records, consultation notes
• Photographs: Before-and-after images for treatment records (with consent)
• Payment Information: Billing address, partial card details (if applicable)
• Digital Data: IP address, website usage data (cookies), appointment booking records
• Other personal data you provide to us voluntarily for the provision of services

This information helps us to:

• Provide safe, appropriate, and tailored medical aesthetic treatments
• Conduct medical consultations and assessments
• Maintain accurate treatment and medical records
• Manage appointment bookings and payments
• Send appointment reminders and post-treatment care advice
• Comply with our legal and regulatory obligations

We also may utilize your contact details and analyze web/email/survey analytics to perform marketing activities. We utilize either your consent for this where appropriate, or legitimate interests otherwise (like for business to business advertising) to help us best communicate with and provide relevant content to you.

Separately, we may also process job application and resume/CV submissions to help you explore working with us, processed under our legitimate interests.

Data sharing and transfers

We do not share or transfer your information with any third-parties other than for the purposes of enabling trusted service providers (such as cloud storage providers, payment processors, IT support, and marketing platforms) to support us in delivering our services. These providers act only under our instructions and do not use your data for their own purposes. 

Any transfers of information sourced from the European Economic Area (EEA) or the UK to outside these regions will only be done under adequate and compliant measures, utilizing standard contractual clauses, transfer impact assessments, sufficient technical and organizational controls, and/or other adequacy measures.

In the case of a company sale or merger, asset transfer, or similar scenario, your data may be transferred to the new entity and you will be notified as required.

Data security and retention

We have put into place robust technical and organizational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.

Personal data is stored in the EU or the USA and only kept as long as necessary to provide the requested services, maintain our customer leads fulfillment, and comply with any legal, regulatory, or tax requirements. Typically this is 8 years from the time of your last treatment for clinical data. For more information on retention specifics, please contact us.

Cookies and Tracking Technologies

We may use various technologies to collect information, and this may include sending cookies to your computer or mobile device. Cookies are small data files stored on your device that help us to improve the Services and your experience. We may also collect information using web beacon files (also known as “tracking pixels”), which may be used in the Services, website, or emails to help deliver cookies, count visits, understand usage and campaign effectiveness, and determine whether an email has been opened and acted upon.

You can edit your cookie preferences by using our cookie banner. Please note that if you choose to remove or reject cookies, this may affect the availability and functionality of the Services.

Your rights

You always have the right to withdraw your consent and, you also may have the right to the below requests. To exercise these rights, please see our contact details below.

• Access, correct, delete, object or restrict the use of, and obtain a list of third-parties who have access to your personal data
• Opt-out of the sale or sharing of your information to third-parties
• Opt-out of automated-decision making, profiling, marketing, and targeted advertising
• Right to not being discriminated against for not allowing your data to be shared

Contact Us

For any questions or concerns on the processing of your personal data, to reach our data protection officer, or additional information on this privacy notice please contact us at info@skingevity.co.uk.