Privacy notice

Last updated: 28 September 2026

This notice explains how Aestelio ("we") uses personal information collected through this website. It's written for med spa owners and staff who contact us.

Who we are

Aestelio Ltd is a company registered in England and Wales (company no. 17444079). Our registered office is 71-75 Shelton Street, London WC2H 9JQ, United Kingdom. We're the "data controller" for the information described here, which means we decide how it's used and we're responsible for it.

We're a UK company and we also work with clinics in the United States. We handle everyone's information under UK data protection law (the UK GDPR and the Data Protection Act 2018), wherever you are. We're registered with the UK Information Commissioner's Office (ICO), registration number ZC241690.

Questions or requests: email alex@aestelio.com.

What we collect and why

• Messages you send us. If you fill in the contact form or email us, we collect your name, med spa name, city and state, email, phone number (if you give it) and your message. We use it to reply and, if you ask, to discuss working together. The legal basis is taking steps at your request before a contract, or our legitimate interest in answering business inquiries.
• Calls you book. Our booking tool (Calendly) collects your name, email and the time you choose. Calls may be recorded for training and quality purposes. If a call is recorded, you'll be told at the start of the call.
• This website. We don't set advertising or tracking cookies, and there are no tracking pixels on this site. Our fonts are loaded from Google Fonts, which means your browser sends your IP address to Google so it can deliver them.

Marketing

We only send marketing emails to business contacts where the law allows it, and every message includes a way to opt out. You can also opt out at any time by emailing alex@aestelio.com.

Who we share it with

We use service providers for email, booking, forms and managing our client relationships. They handle your information only on our instructions. Some are based outside the UK, including in the United States; where that's the case we rely on UK-approved safeguards for international transfers. We never sell personal information, and we don't share it with anyone for advertising.

How long we keep it

• Inquiries that don't become clients: deleted after 12 months.
• Client records: kept for the length of the contract plus six years, for accounting and legal reasons.

Your rights

You can ask to see the information we hold about you, correct it, delete it, or object to how we use it. Email alex@aestelio.com and we'll respond within one month. There's no charge.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.