Privacy Policy
Aesthetidocs Limited ("Aesthetidocs") is committed to protecting your personal information and respecting applicable data protection laws around the world. This privacy policy explains how we do this, and it applies to your use of our websites, products, and services.
How we use your personal information
We use personal information in order to promote and provide the Aesthetidocs software service, to ensure the security of our websites, and to run our business. We have set out below more information on the categories of personal information that we collect, the specific ways in which that personal information is processed by us, the legal bases which permit us to do this, and the types of partners with whom we share your personal information.
What information does Aesthetidocs collect?
- Your name, username, and password
- Your address, email address, and phone number
- Your payment details
- Your marketing preferences, including any consents you have given us
- Information related to the browser or device you use to access our websites
- Records of your use of Aesthetidocs services
- Any personal medical information you submit to us when completing any of our forms, documentation or otherwise provided by you as part of booking and managing your appointment with your chosen clinic
How does Aesthetidocs use your information?
We use your information as follows:
-
To fulfil a contract with you or take steps at your request before this:
- When you use our platform to create and manage a booking with a clinic
- Providing information and technical support if you ask for this
- Contacting you with information about changes to services
- Handling credit card information provided through our websites using PCI-compliant payment services
- Storing and analysing your information in order to review and progress your job application if you apply to work with us
-
As required by Aesthetidocs to conduct our business and pursue our legitimate interests, in particular:
- Giving you access to our products or services
- Providing you with different content within a product or service, depending on how you use that product or service
- Letting you know about Aesthetidocs products and services by post, email, and phone in accordance with your marketing preferences and laws relating to direct marketing
- Analysing how you use Aesthetidocs products and services so we can improve our levels of service and develop future products and services, including through the use of surveys
- Ensuring the security of Aesthetidocs websites and information technology systems and protecting our rights.
-
Where you give us consent:
- Where we need your consent to process your medical and other sensitive personal information
- If we need your consent in order to send marketing for Aesthetidocs products and services to you
-
For purposes which are required by law:
- Sharing your personal information in order to comply with legal obligations to which Aesthetidocs is subject.
How will Aesthetidocs share your information?
We share your personal details:
- Within Aesthetidocs in order to carry out the processing described above
- With such clinics or treatment providers with whom you are seeking to make and manage a booking or appointment
- With third party service providers who process your information on Aesthetidocs’s behalf for the purposes above – such as payment processors, or IT service providers
We will also share your personal information:
- If we think this is necessary to in order to protect the rights, property, or safety of Aesthetidocs, our employees, our commercial partners, or our customers. This includes sharing information for the purposes of fraud protection and credit risk reduction
- With government authorities and/or law enforcement officials if required by law.
Giving and withdrawing your consent, and updating your personal information
Where your consent is required for us to process your personal information, we will ask for your consent at the point at which you provide your data. You have the right to withdraw that consent at any time. You can also update your personal information at any time. If you wish to do either, contact us at support@aesthetidocs.com .
Storing your personal information
Your personal information may be stored and processed outside of the country where it is collected, including outside of the United Kingdom or the European Economic Area. When transferring information to others, within the UK, the EEA or otherwise, we ensure that appropriate and suitable safeguards and technical measures are in place to protect your personal data. To do this, we make use of standard contractual clauses that have been approved by the UK authorities and the European Commission with our suppliers, or we implement other similar measures required by laws around the world.
We will only keep records of your personal information for as long as is reasonably necessary for the purposes for which we have collected it, and in order to comply with any statutory or regulatory obligations in relation to retention of records. We respect requests to stop processing your personal data for marketing purposes. This includes keeping a record of your request indefinitely so that we can respect your request in future.
Your rights
You have the right to request access to and rectification or erasure of personal information, the right to restrict processing of your personal information, and the right to object to processing of your personal information. You have the right to object to your personal information being processed on the grounds of Aesthetidocs’s legitimate interests. You have the right to object to us sending you direct marketing and profiling you for the purposes of direct marketing. You have the right to lodge a complaint regarding our processing of your personal information with a data protection supervisory authority in a country where you live, work, or where you believe a breach may have occurred.
Contacting us
The data controller for our websites, products and services is Aesthetidocs Ltd of Lockview House, 49 Lockview Road, Belfast, Northern Ireland, BT9 5FJ.
You can contact us by email at support@aesthetidocs.com .
If you wish to contact our Data Protection Officer, please email dataprotection@aesthetidocs.com .
PRIVACY POLICY
Maison Lumiere Aesthetics By Dr.Lydia
Last updated: 10 October 2026
1. Introduction
At Maison Lumiere Aesthetics By Dr.Lydia, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, protect and share personal data when you visit our website, book an appointment, attend a consultation, receive treatment or contact our clinic.
We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, where applicable.
As an aesthetic clinic, we may process sensitive information about your health and treatment history. We take appropriate steps to ensure that this information is handled confidentially and securely.
2. Who We Are
For the purposes of applicable data protection law, the data controller responsible for your personal information is:
Clinic name: Maison Lumiere Aesthetics By Dr.Lydia
Legal business name: Ismaily Consultify Limited
Address: Market Square,Bailieborough,Co Cavan,A82XV10
Email: care@maisonlumiereaesthetics.com
Telephone: +353 87 3399880
Website: https://maisonlumiereaesthetics.com/
The data controller determines how and why your personal information is processed.
For privacy-related questions or requests, please contact us using the details above.
3. Personal Information We Collect
Depending on your interactions with the clinic, we may collect the following categories of personal data.
3.1. Identification and contact information
- Full name and date of birth, where required.
- Email address and telephone number.
- Address, where necessary.
- Appointment and booking details.
3.2. Health and clinical information
Where necessary for consultation and treatment, we may collect:
- Medical history and relevant health conditions.
- Allergies and medication information.
- Previous aesthetic treatments and procedures.
- Skin condition and treatment suitability information.
- Consultation notes, treatment records and aftercare information.
- Information about adverse reactions or complications.
- Clinical photographs, where appropriate and properly managed.
Health information is treated as specially protected personal data under the GDPR.
3.3. Payment and transaction information
Where you purchase a service, we may process information relating to the transaction, such as the service purchased, payment status, invoice details and relevant transaction references.
Payments may be processed by a third-party payment provider. We do not intentionally collect or retain full payment card details where these are handled directly by that provider.
3.4. Website and technical information
When you visit our website, we may collect technical information such as your IP address, browser type, device information, website usage data and cookie preferences, depending on the website functions and technologies used.
Non-essential cookies and similar tracking technologies will be used in accordance with applicable consent requirements.
3.5. Communications and enquiries
We may retain information you provide when contacting us by email, telephone, online forms or other communication channels, including enquiries, feedback and complaints.
4. How We Collect Your Information
We may collect personal data:
- Directly from you when you book an appointment or complete a form.
- During your in-person consultation or treatment.
- Through communications with our clinic.
- Through our online booking, payment or practice-management systems.
- From healthcare professionals or other sources where appropriate, lawful and necessary for your care.
Where personal information is obtained from another source, we will provide the information required by applicable data protection law.
5. Why We Use Your Personal Information
We process personal information for the following purposes:
5.1. Appointment management
To arrange, confirm, amend and manage appointments, send service-related reminders and respond to booking enquiries.
5.2. Consultation and treatment
To assess treatment suitability, review relevant medical information, provide appropriate aesthetic services, maintain clinical records and support safe follow-up care.
5.3. Payments and administration
To process payments, issue invoices, maintain business records and manage accounting obligations.
5.4. Communication and customer service
To respond to questions, handle complaints, provide relevant appointment information and communicate about services you have requested.
5.5. Legal and professional obligations
To comply with applicable legal, regulatory, professional, record-keeping and insurance requirements and, where necessary, establish, exercise or defend legal claims.
5.6. Website operation and security
To maintain the security and functionality of our website, prevent misuse and understand website performance using appropriate tools and permissions.
5.7. Marketing
Where permitted by law, we may use contact details to send information about clinic services, offers or updates if the necessary conditions for marketing communications have been met.
You may opt out of marketing communications at any time. Appointment-related messages will remain separate from marketing messages.
6. Our Legal Bases for Processing
We process personal data only where an appropriate legal basis applies.
Depending on the circumstances, these may include:
- Contract: where processing is necessary to arrange or provide a service you have requested.
- Legal obligation: where we must process information to comply with applicable law.
- Legitimate interests: where necessary for legitimate business purposes, provided these interests are not overridden by your rights and freedoms.
- Consent: where we rely on your consent for a specific purpose, such as certain optional marketing activities or optional uses of photographs.
- Vital interests: where processing is necessary to protect someone's vital interests in circumstances permitted by law.
Where we process health information or other special-category data, an additional condition under Article 9 GDPR must also apply. Depending on the circumstances and our professional arrangements, this may include processing necessary for medical care or treatment under applicable law, or explicit consent where appropriate.
We assess the applicable legal basis for each processing activity rather than relying on a single basis for all information.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before the withdrawal, and it does not require us to erase records that we must lawfully retain.
7. Clinical Photographs and Before-and-After Images
- Clinical photographs may be taken where appropriate for assessment, treatment planning, progress monitoring or clinical record-keeping.
- We will explain the relevant purpose and handle clinical photographs in accordance with applicable data protection requirements.
- Clinical use and marketing use are separate. If we wish to use an identifiable photograph or treatment result for our website, social media, advertising or promotional materials, we will obtain any required permission and establish an appropriate legal basis before doing so.
Agreeing to treatment does not automatically mean agreeing to promotional use of your photographs.
Where promotional use relies on consent, refusing or withdrawing that consent will not affect your access to treatment. Withdrawal will not make past lawful use unlawful, but we will address future use in accordance with applicable law and the terms of the consent.
8. Who We Share Your Information With
We do not sell your personal data.
Where necessary and lawful, we may share relevant information with:
- Online booking and practice-management providers.
- Payment processors and accounting service providers.
- Website hosting, IT support and security providers.
- Healthcare professionals or other providers involved in your care, where appropriate.
- Insurers, legal advisers, auditors or professional advisers where necessary.
- Regulators, public authorities or law enforcement agencies where disclosure is legally required or otherwise lawful.
We seek to ensure that third-party service providers process personal data under appropriate contractual and security arrangements.
We disclose only information that is reasonably necessary for the relevant purpose, subject to applicable legal and professional confidentiality obligations.
9. International Data Transfers
Some of our website, booking or technology providers may store or process personal data outside the European Economic Area (EEA).
Where personal data is transferred internationally, we will ensure that the transfer complies with applicable data protection law. Depending on the circumstances, this may involve an adequacy decision, appropriate safeguards such as standard contractual clauses, or another lawful transfer mechanism.
You may contact us for further information about relevant safeguards, subject to applicable law.
10. How Long We Keep Your Information
- We retain personal data only for as long as necessary for the purposes for which it was collected, taking account of applicable legal, professional, regulatory, insurance and record-keeping requirements.
- Retention periods may differ depending on the type of information:
- Booking and appointment records: for the period needed to manage appointments and maintain relevant business records.
- Clinical records and medical information: for the period required by applicable legal and professional obligations, taking account of the type of treatment and any relevant limitation periods.
- Financial and accounting records: for the period required by applicable tax and accounting law.
- Marketing records: until you withdraw consent, object where applicable, or the information is no longer required, subject to limited records needed to respect your preferences.
- Website and technical records: for the period reasonably necessary for security, functionality, analytics and applicable legal requirements.
- When information is no longer required, we will securely delete it, anonymise it or otherwise dispose of it appropriately, subject to any lawful retention obligations.
11. How We Protect Your Information
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
Depending on the information and systems involved, these measures may include access restrictions, secure systems, staff confidentiality obligations, appropriate security procedures and secure disposal practices.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
If a personal data breach occurs, we will assess and respond to it in accordance with applicable legal requirements, including any relevant notification obligations.
12. Your Data Protection Rights
Subject to applicable law and any relevant exceptions, you may have the right to:
- Access: request a copy of your personal data and information about how it is processed.
- Rectification: request correction of inaccurate or incomplete information.
- Erasure: request deletion of personal data in certain circumstances.
- Restriction: request that processing be restricted in certain circumstances.
- Data portability: receive certain information in a structured, commonly used, machine-readable format and, where applicable, transmit it to another controller.
- Object: object to processing based on legitimate interests and object at any time to direct marketing.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
- Complain: lodge a complaint with the relevant supervisory authority.