GDPR Information
Last updated: 13 August 2026
1. Data Controller
alterunpro is the data controller responsible for your personal information. Our contact details are:
Address: 42 Marylebone Lane, London W1U 2DS, United Kingdom
Email: [email protected]
2. Personal Data We Process
We process the following categories of personal data:
- Identity data: name, title
- Contact data: email address, postal address
- Health data: skin concerns, treatment history, allergies or sensitivities
- Technical data: IP address, browser type, device information
- Usage data: how you interact with our website
3. Lawful Basis for Processing
We process your personal data based on the following lawful grounds under GDPR:
Consent
When you submit a consultation request or subscribe to communications, you provide explicit consent for us to process your data for these specific purposes.
Legitimate Interests
We process data to operate our business, improve our services, ensure security, and prevent fraud. We balance these interests against your rights and freedoms.
Contractual Necessity
Processing is necessary to provide the services you have requested, including booking consultations and delivering treatments.
4. Your GDPR Rights
Under the General Data Protection Regulation, you have the following rights:
Right to Access
You can request a copy of the personal data we hold about you, free of charge in most cases.
Right to Rectification
You can ask us to correct inaccurate or incomplete personal data.
Right to Erasure
You can request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes it was collected.
Right to Restrict Processing
You can ask us to temporarily or permanently stop processing all or some of your personal data.
Right to Data Portability
You can request a copy of your personal data in a structured, commonly used format to transfer to another service provider.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw that consent at any time.
5. How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us via email at [email protected] or by post at the address listed above. We will respond to your request within one month, though this may be extended in complex cases.
6. Data Security Measures
We implement appropriate technical and organisational security measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Access controls limiting who can view personal data
- Regular security assessments and updates
- Staff training on data protection obligations
7. Data Retention Periods
We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy:
- Client treatment records: 7 years from last treatment
- Marketing communications: until you unsubscribe
- Website usage data: typically 26 months
- Consultation enquiries not converted to clients: 2 years
8. International Data Transfers
We primarily process data within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
9. Automated Decision Making
We do not use automated decision making or profiling that produces legal or similarly significant effects.
10. Right to Lodge a Complaint
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: www.ico.org.uk
Telephone: 0303 123 1113
11. Changes to GDPR Practices
We may update our GDPR practices and this information page periodically. Significant changes will be communicated to affected individuals where required by law.