Privacy policy.

Who is responsible for your data

The data controller is Agnieszka Weiss, self-employed, trading as Agnes Beauty and Aesthetics Clinic, 57 Foxhills Road, Scunthorpe DN15 8LH, United Kingdom.

The clinic is registered with the Information Commissioner’s Office under number ZB914700. I handle personal data in line with UK GDPR and the Data Protection Act 2018.

To contact me about your data: call +44 7517 953340, message me on Facebook, or write to the clinic address.

What I collect

• Contact and booking details: your name, phone number, email address, appointment and payment history. Bookings are taken through Fresha.
• Pre-treatment consultation: information about your health, medication, allergies, previous treatments, pregnancy and breastfeeding. This is health data, a special category, and I treat it with particular care.
• Before and after photos: taken only if you agree, and I ask separately before anything is shown publicly.
• Correspondence: messages and phone calls about appointments.
• Reviews: if you leave a review on Google or Fresha, it is published by that service, not by me.

Why, and on what basis

• To provide the service (contract): booking, carrying out the treatment, contacting you about your appointment, aftercare advice.
• For your safety (explicit consent for health data): deciding whether a treatment is suitable and choosing the right products. Without this information I cannot treat you safely.
• Legal and tax duties: accounts and financial records.
• My legitimate interests: keeping treatment records, defending against any claim, contacting you in an urgent matter.
• Consent: result photos, publishing photos, and news about offers if you ask for them. You can withdraw consent at any time.

Who I share it with

I never sell your data and never pass it on for advertising. I do use services the clinic could not run without:

• Fresha: online booking and payments.
• My hosting provider: keeping this website online.
• My accountant: tax returns.
• My insurer or solicitor: only if a claim were ever made.
• Public authorities: where the law requires it.

How long I keep it

• Treatment records and consent forms: 7 years after your last visit, as required by my professional insurance and UK practice standards.
• Accounting records: 6 years, in line with HMRC requirements.
• Photos: until you withdraw your consent.
• Enquiries from people who never booked: up to 12 months.

Your rights

At any time you can ask me for:

• access to your data and a copy of your records,
• correction of anything out of date or wrong,
• erasure, unless I have to keep it for legal or insurance reasons,
• restriction of processing, or to object to it,
• a copy of your data to take elsewhere,
• withdrawal of consent, for example for photos.

I reply within one month and there is no charge. If you think I am handling your data badly, you can complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, phone 0303 123 1113.

How I keep records safe

Paper records are locked away at the clinic and electronic records are password protected. I am the only person with access to them, and I never leave documents where another client could see them.

This site and cookies

This website uses no advertising or tracking cookies. There is no Google Analytics and no social media pixel here, which is why you won’t see a cookie consent banner. Three things are worth knowing about:

• Browser storage: if you switch the site between Polish and English, your choice is saved in your own browser (an entry called “agnes-lang”). It stays on your device and never reaches me. Clearing the site data removes it.
• Google Fonts: the typefaces load from Google’s servers, so Google sees your device’s IP address.
• The map: the Google map only loads once you click it. Until then nothing connects to Google Maps.

My hosting provider keeps technical server logs, including IP addresses, purely for security and diagnostics. Links to Fresha, Facebook and Instagram lead to outside services with their own privacy policies.

Changes to this policy

If I change the way I work with your data, I will update this page and change the date at the top. The version published here is always the one that applies.