Privacy Notice

1. Who we are

CH Aesthetics is an aesthetic nursing practice run by Christine Haining, Aesthetic Nurse Practitioner and NMC Registered Nurse. Christine is the data controller for personal information collected through this website.

Trading name: CH Aesthetics
Address: 10 Rowan Walk, Strathaven, Scotland, ML10 6HH
Website: https://chaesthetics.org
Email: cdh.aesthetics@gmail.com

2. What information we collect

When you use the contact form or the Malta Register Your Interest form, we collect your name, email address, and any message you choose to include.

Please do not include medical histories, diagnoses, medication details or other health information in these forms. If you become a patient, clinical information will be collected separately through the consultation process.

3. How we use your information

We use the information you submit to respond to your enquiry, or — if you have given your consent — to contact you about future Malta clinic dates. We will not use your details for general marketing.

General enquiries: We rely on legitimate interests as our lawful basis. Our legitimate interest is in responding to enquiries about our services. We have documented a legitimate interests assessment to support this.

Malta interest registrations: The Malta form includes an optional checkbox. If you tick it, you are giving your consent for Christine to email you about future Malta appointment dates. This is not consent to general marketing. You can withdraw your consent at any time by emailing cdh.aesthetics@gmail.com. Withdrawing consent does not affect anything that happened before you withdrew it.

If you submit the Malta form without ticking the checkbox, your details will not be kept for future Malta communications. They will be deleted after your submission has been handled. This is done manually by Christine; there is no automated deletion.

4. How your information is handled

When you submit a form, the following happens:

1. Your submission is received by the CH Aesthetics web server, hosted on the GoDaddy Airo platform.
2. It is forwarded to GoDaddy Inbox (powered by Re:amaze), where it is stored as a conversation thread.
3. An email notification is sent to Christine's Gmail address. This is an ordinary consumer Gmail account. Google is not a contracted data processor; it receives the email as Christine's personal email provider, under Google's own terms of service and privacy policy.

We do not sell your information or share it with unrelated third parties.

GoDaddy publishes a Data Processing Addendum, and its Data Privacy Framework notice identifies Re:amaze as an affiliate certified under the UK Extension to the EU–US Data Privacy Framework. Whether those arrangements apply to Christine's specific account has not been independently verified. For more information, see GoDaddy's privacy documentation at godaddy.com and Google's privacy policy at policies.google.com.

If you prefer not to use the website form, you can email Christine directly at cdh.aesthetics@gmail.com. Direct emails are also handled through her consumer Gmail account.

5. How long we keep your information

General enquiries

Enquiries that do not progress to treatment are normally deleted 12 months after the last meaningful contact, unless there is a legal or other justified reason to keep them longer.

Malta interest registrations

If you ticked the email-updates checkbox, we will keep your details until Malta clinic dates are confirmed and you have had the opportunity to book — or until you ask us to remove them, whichever comes first. If no Malta dates are announced within three years of your registration, we will delete your details unless you have asked us to keep them.

If you did not tick the checkbox, your details will be deleted after your submission has been handled. This is done manually; there is no automated process.

Clinical records

If you become a patient of CH Aesthetics, we retain your professional treatment records for at least seven years from the date of treatment, in line with the minimum requirement in Christine's professional indemnity insurance policy (Insync/AXIS). If you were under 18 at the time of treatment, the policy requires retention for at least seven years after you reach the age of majority. Longer retention may apply where other professional, legal or regulatory requirements require it. If Malta services commence in future, the relevant Maltese healthcare record-keeping requirements will also be considered at that time.

6. Your rights

Under UK data protection law, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information, subject to any legal or regulatory obligations to retain it
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is based on consent, without affecting anything done before withdrawal
• Restrict processing in certain circumstances
• Data portability where processing is automated and based on consent or contract

To exercise any of these rights, email Christine at cdh.aesthetics@gmail.com. We will respond within one month.

7. Complaints

If you have a concern about how we handle your personal information, please contact Christine first so we can try to resolve it.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Website: ico.org.uk
Helpline: 0303 123 1113

CH Aesthetics is UK-based and the ICO is the applicable supervisory authority at this time. If the planned Malta service proceeds, we will review which supervisory authority or authorities apply.

8. Changes to this notice

We may update this notice from time to time. The date at the top of this page shows when it was last reviewed.