Last reviewed: 26 July 2026. This website does not use analytics, advertising cookies or a public form database.
Controller and contact
The controller is STAR GROUP COLLECTIVE LTD, company number 17252181, operating Idalia Aesthetics & Wellness as its client-facing identity. Privacy enquiries can be sent to contact@idalia-aesthetics.co.uk.
Information collected
- Identity and contact information such as name, phone number, email and address.
- Your treatment enquiry, preferred dates, location and message history.
- Health, medication, allergy, previous-treatment, consent, photography and aftercare information needed for safe care.
- Appointment, payment, invoice, complaint and business-administration records.
- Technical security or access information generated by hosting services when the published website is visited.
How information is received
Information may be provided through the website enquiry form, WhatsApp, phone, text, email, social media, consultation or treatment records. The website form sends the details you enter to the Idalia email mailbox through the website host. It does not add the enquiry to a public website database.
Why information is used
- To answer an enquiry and take requested steps before a booking.
- To arrange, provide and administer an appointment or contract.
- To carry out suitability, consent, safety, treatment and aftercare processes.
- To meet insurance, tax, record-keeping, safeguarding and legal obligations.
- To establish, exercise or defend legal claims and protect the website from misuse.
Lawful bases and health information
Depending on the context, processing can be necessary to take steps before or perform a contract, comply with a legal obligation, protect vital interests, or pursue legitimate interests such as running the service safely and handling concerns. Health information is special-category data and is handled only where an additional lawful condition applies, which can include explicit consent, health-care provision by or under an appropriate professional arrangement, or legal claims.
Sharing and processors
Information may be handled by the web host, email provider, payment service, record system and the messaging platform you choose. It can also be shared where necessary for professional advice, insurance, safeguarding, referral, prescribing, complaints or legal obligations. Personal information is not sold.
International transfers
Some communication or technology providers may process information outside the UK. Where that occurs, the relevant provider and operator safeguards are used as required by data-protection law.
Retention and security
Enquiries are kept only as long as reasonably necessary. Treatment, consent, financial, photography and safety records can require longer retention under insurance, tax, product, professional or legal obligations. Access is limited and reasonable technical and organisational safeguards are used, but no internet or messaging service can be guaranteed completely secure.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to or receive a copy of personal information and to withdraw consent. Some rights are limited where records must be retained for legal, insurance or safety reasons. You can complain to the UK Information Commissioner’s Office if a privacy concern is not resolved.
Changes
This notice is reviewed when the website, booking system, service providers or legal requirements change. The current review date appears at the top of the page.