Legal
Privacy Policy
How Grace Aesthetics collects, uses and protects your personal information.
Last updated: April 2026
Who we are
Grace Aesthetics is a sole trader business operated by Lauren Kemp, providing advanced aesthetic treatments in Northampton.
**Business name:** Grace Aesthetics
**Owner:** Lauren Kemp
Address: Northampton, full address provided when you book.
Email: hello@graceaesthetics.co.uk
Lauren Kemp is the data controller for the purposes of UK GDPR and the Data Protection Act 2018.
What information we collect
We collect personal information in the following ways:
Contact form
When you submit an enquiry via our contact form, we collect your name, email address, phone number (if provided), and the content of your message.
Membership enquiry form
When you express interest in a Grace Aesthetics membership or treatment bundle, we collect your name, email address, phone number (if provided), and details of your enquiry.
Booking via Fresha
Appointments are booked through Fresha, a third-party platform. Any personal data you provide during the booking process is collected and processed by Fresha under their own privacy policy. We encourage you to review Fresha's privacy policy before booking.
Email marketing
If you opt in to receive news, offers or updates from Grace Aesthetics, we will collect your name and email address for this purpose. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly. We will never send you marketing emails without your explicit consent.
How we use your information
We use the personal information you provide solely to:
- Respond to your enquiry or message
- Provide information about treatments, membership and pricing
- Follow up on membership or bundle enquiries
- Send you news, offers or updates where you have opted in to receive them
- Comply with any legal obligations
We will never use your information for unsolicited marketing without your explicit consent, and we will never sell your data to third parties.
Legal basis for processing
Under UK GDPR, we rely on the following lawful bases for processing your personal data:
- Legitimate interestsresponding to enquiries and providing the services you have requested
- Consentwhere you have explicitly opted in to receive marketing communications
- Legal obligationwhere we are required to process data to comply with applicable law
How long we keep your data
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected:
- Contact and membership enquiries, up to 12 months from the date of your enquiry, unless an ongoing client relationship is established
- Marketing email subscribers, until you unsubscribe or request deletion
- Client treatment records, retained for a minimum of 8 years in accordance with healthcare record-keeping guidance
Who we share your data with
We do not sell, trade or rent your personal data to third parties. Your data may be shared only in the following limited circumstances:
- Website formsenquiry forms on this website do not currently send or store your details; please contact Lauren by phone, WhatsApp or email
- Email marketing platformif you have opted in to marketing emails, your name and email address will be stored with our email service provider solely for this purpose
- WordPress / web hosting providerwho store the website and its data securely
- Legal authoritieswhere we are required to disclose data by law
Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of accessto request a copy of the personal data we hold about you
- Right to rectificationto request correction of inaccurate data
- Right to erasureto request deletion of your data where there is no lawful reason to retain it
- Right to restrict processingto request that we limit how we use your data
- Right to data portabilityto receive your data in a structured, machine-readable format
- Right to objectto object to processing based on legitimate interests
To exercise any of these rights, please contact us at hello@graceaesthetics.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk (opens in a new tab).
Cookies
Our website uses cookies. For full details of what cookies we use and why, please see our Cookie Policy.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this policy periodically.
Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact Lauren Kemp at hello@graceaesthetics.co.uk.