Privacy Policy

1. Who we are

Vitality Aesthetics is operated by Serhat Dereli, based in London, United Kingdom. For data protection purposes, Serhat Dereli is the data controller. You can contact us at [email protected].

2. What data we collect

When you submit a waitlist enquiry through our website, we collect the following information:

• —Full name
• —Email address
• —Phone number (optional)
• —Treatment of interest
• —Any message you choose to include
• —Source (the website from which the enquiry was submitted)
• —Date and time of submission

We do not collect sensitive personal data (such as health records or financial information) through the waitlist form.

3. How we use your data

We use the information you provide solely to:

• —Respond to your enquiry and arrange a consultation.
• —Manage our waitlist and notify you when bookings open.

We will not use your data for unsolicited marketing without your explicit consent, and we will not sell or share your data with third parties for their own marketing purposes.

4. Legal basis for processing

We process your data on the basis of your consent, given when you tick the consent checkbox on the enquiry form and submit your details. You may withdraw consent at any time by contacting us at [email protected].

5. Data storage and security

Your data is stored securely on servers located within the European Economic Area. We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.

6. Retention

We retain your enquiry data for up to 24 months from the date of submission, or until you request deletion, whichever is sooner. After this period, data is securely deleted.

7. Your rights under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• —The right to access the personal data we hold about you.
• —The right to rectification of inaccurate data.
• —The right to erasure ("right to be forgotten").
• —The right to restrict or object to processing.
• —The right to data portability.
• —The right to withdraw consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

This website uses only essential session cookies required for security and functionality. We do not use tracking or advertising cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

10. Contact

For any questions about this Privacy Policy or our data practices, please contact: [email protected].