Anita Pro Beauty Ltd, trading as Anita Pro Beauty

Last updated: 10 November 2026

1. Who we are

Anita Pro Beauty Ltd, trading as Anita Pro Beauty (“we”, “us”, “our”), is a private aesthetics and skin clinic based in Whitstable, Kent. We are the data controller for the personal information described in this policy, which means we decide how and why it is used.

• Company name: Anita Pro Beauty Ltd

• Registered in: England and Wales

• Trading address: 60 Grasmere Road, Chestfield, Whitstable, Kent, CT5 3NA, United Kingdom

• Email: anitaawilson@gmail.com

• Telephone: +44 7887 898761

2. About this policy

This policy explains what personal information we collect when you visit our website at https://anitaprobeauty.co.uk/, contact us, book an appointment or receive treatment, how we use it, and the rights you have. Please read it together with our Booking Terms & Conditions and Website Terms & Conditions.

We handle personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

3. Information we collect

Website visitors

• Technical information such as IP address, browser type, device type, pages viewed and time spent on the site, collected through cookies and similar technologies (see section 12).

• Information you submit through website forms or by email, telephone or message, such as your name, contact details and the content of your enquiry.

Clients

• Identity and contact details: name, date of birth, address, email address, telephone number and, if you choose to give it, an emergency contact.

• Booking information: the treatments you book, appointment dates and times, booking history, cancellations and rescheduling, and communications about your appointments.

• Payment information: records of deposits and payments made. We do not intend to store full card details ourselves.

• Health information: medical questionnaires and consultation records, including medical history, medication, allergies, skin conditions, pregnancy or breastfeeding status, and any other information relevant to whether a treatment is suitable for you.

• Treatment records: the treatment provided, products and equipment used, treatment areas, settings or quantities where relevant, practitioner notes, patch test results, aftercare advice and follow-up.

• Consent and declarations: signed or electronically recorded consent forms and the declarations you make about your health and circumstances.

• Photographs: photographs taken for your treatment record, where you agree.

• Communications: emails, messages and notes of calls with us, including feedback and complaints.

• Marketing preferences: whether you have agreed to receive marketing from us.

4. How we collect information

We collect information directly from you (online, by phone, by email or message, and in the clinic), automatically through our website, and from our booking system when you book through it. If someone else books on your behalf, we will treat the information they give us as relating to you.

5. How we use your information and our lawful bases

Under UK GDPR we must have a lawful basis for each use of personal data. The list below sets out the bases we rely on, depending on the purpose and circumstances of the processing.

• Responding to enquiries. Legitimate interests (running our business and answering people who contact us), or steps at your request before entering a contract.

• Managing bookings, reminders and appointment changes. Performance of our contract with you, or steps at your request before entering a contract.

• Taking deposits and payments, and keeping accounting records. Performance of our contract with you, and legal obligation (tax and accounting law).

• Assessing suitability and providing treatment, including keeping treatment records. Performance of our contract with you and legitimate interests in providing safe, appropriate care. Health information is also handled under the additional conditions in section 6.

• Keeping records for safety, insurance and handling claims or complaints. Legitimate interests (protecting our clients and our business), and establishing, exercising or defending legal claims.

• Responding to complaints and feedback. Legitimate interests, and legal obligation where applicable.

• Marketing by email, text or similar electronic message. Consent, or, for existing clients, the “soft opt-in” permitted by PECR (see section 13).

• Using before-and-after photographs for marketing or social media. Consent only. This is separate from consent to treatment and clinical records.

• Website analytics and non-essential cookies. Consent (see section 12).

• Operating and securing our website. Legitimate interests.

• Complying with legal and regulatory obligations. Legal obligation.

We do not use your personal information for automated decision-making or profiling that has legal or similarly significant effects on you.

6. Health information (special category data)

Information about your health, and photographs that reveal it, is “special category data” and receives extra protection. We process it only where a specific condition in Article 9 of the UK GDPR applies. This may include:

• Provision of health or social care, or assessing your suitability for treatment (Article 9(2)(h)), where the information is handled by, or under the responsibility of, a person who owes a duty of confidentiality; and/or

• Your explicit consent (Article 9(2)(a)), which you give when you complete our medical questionnaire and consent form. You may withdraw consent at any time, but we may then be unable to provide treatment safely, and we may need to keep existing records where the law or safe practice requires it.

We protect health information by:

• Limiting access to those who need it to provide your care or run the clinic.

• Keeping records securely and, where records are kept on paper, in a suitable secure location.

• Using secure, access-controlled devices and accounts.

• Not using health information for marketing.

7. Who we share your information with

We do not sell your personal information. We share it only where necessary and with appropriate safeguards:

• Booking and appointment management providers, where required to manage your appointments.

• Payment processing providers, where required to process deposits and payments.

• Website hosting and technical providers, who support the operation and maintenance of our website.

• Email, messaging and record-keeping providers, used to communicate with you and manage relevant records.

• Professional advisers and insurers: such as accountants, insurers and legal advisers, where needed.

• Other healthcare professionals: such as your GP or a prescriber, only where relevant to your care and with your agreement, unless the law or an emergency requires otherwise.

• Regulators, courts, law enforcement and public authorities, where we are legally required or permitted to disclose information.

Where a provider acts as our processor, appropriate arrangements are used to require it to protect your data and use it only for the relevant service.

8. Transfers outside the UK

Where personal data is transferred outside the UK, we will make sure a lawful transfer mechanism and appropriate safeguards are in place, such as a UK adequacy regulation, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

9. Storage and security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and disclosure. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

If a personal data breach is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner’s Office within 72 hours where required, and tell you without undue delay where the risk is high.

10. How long we keep your information

We keep personal data only as long as needed for the purposes in this policy, including legal, accounting, insurance and safety requirements.

This may include client contact and booking records, medical questionnaires, consent forms, treatment records, clinical photographs, marketing photographs and testimonials, payment and accounting records, website enquiries and marketing preferences.

When the information is no longer required, we securely delete or anonymise it, unless we are required or permitted by law to retain it for longer.

11. Your rights

Under data protection law you have the right to:

• Be informed about how we use your data (this policy).

• Access a copy of your personal data.

• Rectification of inaccurate or incomplete data.

• Erasure of your data in certain circumstances (this is not absolute; for example, we may need to keep treatment records for legal or safety reasons).

• Restrict how we use your data in certain circumstances.

• Data portability of data you provided, where we use it on the basis of consent or contract and by automated means.

• Object to processing based on legitimate interests, and to direct marketing at any time; and

• Withdraw consent at any time, where we rely on consent. Withdrawal does not affect earlier lawful use.

To exercise a right, contact us using the details in section 16. We may ask for proof of identity. We will respond within one month, which may be extended by up to two further months for complex or numerous requests, and we will tell you if this applies. There is normally no charge, unless a request is manifestly unfounded or excessive.

12. Cookies and website tracking

Cookies are small files placed on your device when you visit a website. We may use:

• Strictly necessary cookies, needed for the website to function and stay secure. These do not need your consent.

• Analytics cookies, which help us understand how the website is used.

• Functional or third-party cookies, such as those set by an embedded booking widget, map or video.

• Advertising or social media cookies/pixels, where applicable.

Except for strictly necessary cookies, non-essential cookies are used only where you have given consent. You can also block or delete cookies in your browser settings, although parts of the site may then not work properly.

13. Marketing communications

We will send you marketing by email, text or similar electronic message only if you have consented, or if you are an existing client who gave us your details when booking, we are marketing similar services, and you were given a clear chance to opt out. You can opt out at any time by using the unsubscribe link in a message or by contacting us. Opting out of marketing does not stop service messages about your appointments or treatment.

We will not use health information or treatment records to target marketing. We do not share your details with third parties for their own marketing.

14. Third-party websites

Our website may link to other websites, including social media pages and our booking system. We do not control them and are not responsible for their privacy practices. Please read their privacy notices.

15. Children

Our treatments are for adults aged 18 or over. Our website is not directed at children and we do not knowingly collect their data through it. Please contact us if you believe a child has given us personal information.

16. Contact us and complaints

For any privacy question or request, contact:

Anita Pro Beauty Ltd

60 Grasmere Road, Chestfield, Whitstable, Kent, CT5 3NA, United Kingdom

Email: anitaawilson@gmail.com

Telephone: +44 7887 898761

We would like the chance to resolve any concern first, but you also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk, telephone 0303 123 1113.

17. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with the date at the top. If we make significant changes, we will take reasonable steps to tell you.