Privacy Policy

Last updated: 29 July 2026

Who we are

This website is operated by Emilee Mae's Aesthetics ("EMA Aesthetics", "we", "us"), a nurse-led aesthetics clinic based at Willow Tree Barn, Newcastle Road, Mill Meece, Staffordshire, ST21 6QT. For anything about your data or this policy, contact us at hello@emileemae.co.uk or on 07936 705248. We are the "data controller" responsible for your personal data.

The information we collect

We only collect what we need to answer your enquiry, arrange your appointment and run our website. Depending on how you use the site, that may include:

• Enquiries & contact form — your name, email address, phone number (if you give it), the treatment you're interested in and any message you send us.
• Online bookings — your name, email address, phone number, and the treatment, date and time you choose. Payment is taken in person at your appointment, so we do not collect or store any card or bank details on this website.
• Chat assistant — if you use "Emilee's assistant", we process the messages you type so it can reply. If you choose to leave your name and a contact detail, we save that as an enquiry so Emilee can follow up. The assistant is an automated tool and does not give medical advice.
• Website analytics — like most websites, we collect anonymised information about how the site is used: pages viewed, buttons clicked (for example "book" or "WhatsApp"), the page that referred you, and a random session identifier. This helps us understand what's useful and improve the site.

Health information

Because we provide aesthetic and skin treatments, some information you share when enquiring or at a consultation may relate to your health. This is treated as "special category" data under UK data protection law and handled with extra care. We use it only to assess suitability and provide your treatment safely, and we rely on your explicit consent and on the basis of providing health care to do so.

Why we use your information (our lawful bases)

• To respond to you and provide your treatment — to reply to enquiries, arrange and confirm appointments and provide aftercare. This is done to take steps at your request and to provide the service you've asked for.
• With your consent — for example when you tick the box agreeing we can contact you about your enquiry, or when you share health information. You can withdraw consent at any time.
• For our legitimate interests — to keep the website secure, prevent spam and understand how the site is used, in a way that doesn't override your rights.
• To meet legal obligations — for example keeping appropriate clinical or financial records where the law requires it.

Booking confirmation emails

When you book online, we send you a confirmation email and notify the clinic. These emails are sent through our email provider (see below) and go to the address you supply.

Who we share it with

We never sell your data. We share it only with the trusted service providers ("processors") that make this website work, and only so they can carry out that service for us:

• Netlify — hosts the website.
• Supabase — stores enquiries and bookings securely in a database (hosted in the EU/EEA).
• Resend — delivers our booking confirmation and reply emails.
• Google Analytics — provides the anonymised website usage statistics described above.
• Anthropic — provides the AI that powers the chat assistant; the messages you type in the chat are processed to generate a reply.

Each of these providers is bound to protect your data and use it only on our instructions. We may also disclose information if required to do so by law.

Cookies & analytics

Our analytics use small files (cookies) and similar technology to measure site usage. You can block or delete cookies in your browser settings, and most browsers let you send a "Do Not Track" signal — doing so won't stop you using any part of the site. The site's core booking and enquiry functions do not rely on advertising or tracking cookies.

How long we keep it

We keep enquiry and booking information only for as long as needed to deal with your enquiry, provide your care and meet any legal or clinical record-keeping requirements, after which it is securely deleted. Anonymised analytics are retained in line with our analytics provider's standard periods. If you'd like your information removed sooner, just ask.

Keeping your data safe

Access to enquiry and booking records is restricted to the clinic and protected by login. Data is transmitted over encrypted (HTTPS) connections and stored with reputable providers that maintain industry-standard security.

Your rights

Under UK data protection law you have the right to: ask for a copy of the personal data we hold about you; ask us to correct it if it's wrong; ask us to delete it; object to or restrict how we use it; withdraw consent at any time; and ask for your data in a portable format. To exercise any of these, email hello@emileemae.co.uk and we'll respond within one month.

Complaints

We hope to resolve any concern directly, but you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. Any changes will appear on this page with a new "last updated" date above.

Contact us  ·  Back to home