Last reviewed: 29 July 2026. This website uses optional Google Analytics cookies only after a visitor accepts them and provides online booking through Treatwell. It does not use advertising cookies or a public form database.
Controller and contact
The controller is STAR GROUP COLLECTIVE LTD, company number 17252181, operating Idalia Aesthetics & Wellness as its client-facing identity. Privacy enquiries can be sent to contact@idalia-aesthetics.co.uk.
Information collected
- Identity and contact information such as name, phone number, email and address.
- Your treatment enquiry, preferred dates, location and message history.
- Health, medication, allergy, previous-treatment, consent, photography and aftercare information needed for safe care.
- Appointment, payment, invoice, complaint and business-administration records.
- Technical security or access information generated by hosting services when the published website is visited.
- Where analytics consent is given, information about pages viewed, approximate location, device, browser and referral source.
How information is received
Information may be provided through the website enquiry form, Treatwell online booking, WhatsApp, phone, text, email, social media, consultation or treatment records. The website form sends the details you enter to the Idalia email mailbox through the website host. It does not add the enquiry to a public website database. Treatwell handles the information entered into its booking service under its own privacy information. If you accept optional analytics, Google Analytics also receives website-usage information.
Why information is used
- To answer an enquiry and take requested steps before a booking.
- To arrange, provide and administer an appointment or contract.
- To carry out suitability, consent, safety, treatment and aftercare processes.
- To meet insurance, tax, record-keeping, safeguarding and legal obligations.
- To establish, exercise or defend legal claims and protect the website from misuse.
- With consent, to understand website use and improve its content, navigation and performance.
Lawful bases and health information
Depending on the context, processing can be necessary to take steps before or perform a contract, comply with a legal obligation, protect vital interests, or pursue legitimate interests such as running the service safely and handling concerns. Health information is special-category data and is handled only where an additional lawful condition applies, which can include explicit consent, health-care provision by or under an appropriate professional arrangement, or legal claims.
Sharing and processors
Information may be handled by Treatwell when you use online booking, as well as by the web host, email provider, payment service, record system and the messaging platform you choose. If analytics consent is given, Google acts as an analytics provider. Information can also be shared where necessary for professional advice, insurance, safeguarding, referral, prescribing, complaints or legal obligations. Personal information is not sold.
International transfers
Some communication, hosting or analytics providers may process information outside the UK. Where that occurs, the relevant provider and operator safeguards are used as required by data-protection law.
Cookies and analytics
Google Analytics measurement ID G-597NB6TR3P is installed to help Idalia understand aggregated website use. Analytics storage and all advertising-related storage are denied by default. Google Analytics cookies are enabled only after you select “Accept analytics.” Selecting “Reject” leaves analytics storage denied.
Your choice is saved in your browser so the website can respect it on later visits. You can change or withdraw your choice at any time by selecting “Cookie settings” in the website footer. Withdrawing consent stops future analytics storage and removes accessible Google Analytics cookies set by this website.
Retention and security
Enquiries are kept only as long as reasonably necessary. Treatment, consent, financial, photography and safety records can require longer retention under insurance, tax, product, professional or legal obligations. Access is limited and reasonable technical and organisational safeguards are used, but no internet or messaging service can be guaranteed completely secure.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to or receive a copy of personal information and to withdraw consent. Some rights are limited where records must be retained for legal, insurance or safety reasons. You can complain to the UK Information Commissioner’s Office if a privacy concern is not resolved.
Changes
This notice is reviewed when the website, booking system, service providers or legal requirements change. The current review date appears at the top of the page.