This Privacy Policy should be read alongside our Terms & Conditions, which govern the broader use of our website and services.

Who we are

Aesthetic Solace is an aesthetic clinic based at 13 East Beach Lytham Saint Annes FY8 5EU within the Lytham Osteopaths building. Our website address is https://aestheticsolacealexandramitrea.co.uk/

Aesthetic Solace is operated by Alexandra Mitrea.

Information Commissioner’s Office registration number: ZC146722

You can contact us about this policy or about the data we hold on you at info@aestheticsolacealexandramitrea.co.uk or 07597 786060.

What personal data we collect and why we collect it

Contact forms

If you send us a message through our contact form, we keep your name, email address, phone number (if provided), and your message. We use this only to respond to your enquiry and to follow up where needed. We keep contact form submissions for 12 months after the enquiry is resolved, and we may use them for marketing other services offered by our clinic only.

Mailing list

If you sign up to our mailing list, we collect your name and email address and use them — on the basis of your consent — to send you news, events, and offers from Aesthetic Solace. You can unsubscribe at any time using the link in any email.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

We also use cookies for analytics. You’ll be asked to consent to these the first time you visit the site, and you can change your preferences at any time via our cookie banner.

Analytics

We use Google Analytics 4 to understand how visitors find and use our website so we can improve it. The data is aggregated and, where possible, anonymised — we don’t use it to identify individuals. You can opt out via our cookie banner, or by installing the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout. Google’s privacy policy is at https://policies.google.com/privacy.

Embedded content from other websites

Pages on this site may include embedded content (e.g. videos, images, maps, articles). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

We do not sell your personal data. We share it only with the following, and only where necessary:

• Pabau to manage bookings.
• Fasthosts — who hosts the site and its database.
• Authorities or regulators — where we are legally required to disclose information.

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

• Booking and payment records: kept for 7 years to meet HMRC and accounting obligations.
• Mailing list subscribers: kept until you unsubscribe.
• Contact form enquiries: kept for 12 months after the enquiry is resolved.

Registered user accounts: for users that register on our website, we store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Under UK GDPR you have the right to:

• Request a copy of the personal data we hold about you
• Ask us to correct any data that’s inaccurate or incomplete
• Ask us to delete personal data we hold about you (this does not include any data we are obliged to keep for administrative, legal, or security purposes)
• Object to certain types of processing, including direct marketing
• Withdraw your consent to marketing at any time

If you have an account on this site or have left comments, you can also request an exported file of the personal data we hold about you.

To exercise any of these rights, email us at info@aestheticsolacealexandramitrea.co.uk. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk.

Where your data is sent

Some of the providers we use may process data outside the UK. Where this happens, we rely on safeguards such as the UK’s International Data Transfer Agreement, the EU-US Data Privacy Framework, or Standard Contractual Clauses to ensure your data is protected to UK GDPR standards.

Contact information

For any questions about this policy, or to make a data request, please contact:

Alexandra Mitrea
Aesthetic Solace
13 East Beach Lytham Saint Annes FY8 5EU
info@aestheticsolacealexandramitrea.co.uk
07597 786060

How we protect your data

We take the security of your data seriously. Our website runs over an encrypted (HTTPS) connection, payment data is handled entirely by our PCI-compliant payment processor (we never see or store full card details), and access to personal data is limited to staff who need it. Our website and booking systems are protected by strong passwords and, where available, two-factor authentication. We review our security arrangements regularly.

What data breach procedures we have in place

If a personal data breach occurs, we will assess the risk to those affected, contain the breach as quickly as possible, and — where the breach is likely to result in a risk to your rights and freedoms — notify the ICO within 72 hours and inform you directly without undue delay.

This policy was last updated on 01 June 2026.