Updated: November 3, 2025
Ardesia Aesthetics Ltd. and owned subsidiaries (referred to as “us”, “we”, “our”) take data protection and privacy seriously and aim to comply with all applicable data protection regulations and laws. This privacy notice outlines our commitment to protecting the personal data of our customers (current or potential), partners, and website visitors (“you”, “your”), end users, and describes how we collect, use, and share personal information when you explore or utilize our services (“Services”).
In order to provide you with our products or services, we process the below information. We process your personal data either (i) because it is necessary for us to perform our contract with you, (ii) because we have a legitimate business interest that does not override your rights (for example, maintaining accurate records or improving our services), (iii) where required, on the basis of your explicit consent – particularly in relation to direct marketing communications sent to individual consumers, or (iv) on the basis of our need to process your data to provide you health services.
This information helps us to:
Patient Third-Party Direct Purchases
When patients purchase skincare or other products through third-party platforms linked to MediZen (such as AlumierMD or Clever Patients), MediZen and the relevant third-party platform may collect and process your personal data, including your name, contact details, purchase history, and delivery information. Each platform operates as an independent data controller for the data it collects directly from you. MediZen may receive order and purchase information from these platforms to support your ongoing treatment plan and product recommendations. For details on how these third parties handle your data, please refer to their own privacy notices.
Call Recording
Calls to and from MediZen may be recorded for quality assurance, training, and accurate record-keeping purposes. Call recordings and associated data (such as caller number, call duration, and call outcomes) are processed through third-party platforms for call tracking and analytics and appointemnt management. Call recordings are retained in accordance with our standard retention periods and are accessible only to authorised staff. The legal basis for call recording is our legitimate interest in maintaining service quality and accurate patient records. If you do not wish to be recorded, please inform the team member at the start of the call.
We also may utilize your contact details and analyze web/email/survey analytics to perform marketing activities. We utilize either your consent for this where appropriate, or legitimate interests otherwise (like for business to business advertising) to help us best communicate with and provide relevant content to you.
Separately, we may also process job application and resume/CV submissions to help you explore working with us, processed under our legitimate interests.
We do not share or transfer your information with any third-parties other than for the purposes of enabling trusted service providers (such as cloud storage providers, payment processors, IT support, and marketing platforms) to support us in delivering our services. These providers act only under our instructions and do not use your data for their own purposes.
Any transfers of information sourced from the European Economic Area (EEA) or the UK to outside these regions will only be done under adequate and compliant measures, utilizing standard contractual clauses, transfer impact assessments, sufficient technical and organizational controls, and/or other adequacy measures.
In the case of a company sale or merger, asset transfer, or similar scenario, your data may be transferred to the new entity and you will be notified as required.
We have put into place robust technical and organizational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.
Personal data is stored in the EU or the USA and only kept as long as necessary to provide the requested services, maintain our customer leads fulfillment, and comply with any legal, regulatory, or tax requirements. Typically this is 8 years from the time of your last treatment for clinical data. For more information on retention specifics, please contact us.
We may use various technologies to collect information, and this may include sending cookies to your computer or mobile device. Cookies are small data files stored on your device that help us to improve the Services and your experience. We may also collect information using web beacon files (also known as “tracking pixels”), which may be used in the Services, website, or emails to help deliver cookies, count visits, understand usage and campaign effectiveness, and determine whether an email has been opened and acted upon.
You can edit your cookie preferences by using our cookie banner. Please note that if you choose to remove or reject cookies, this may affect the availability and functionality of the Services.
You always have the right to withdraw your consent and, you also may have the right to the below requests. To exercise these rights, please see our contact details below.
For any questions or concerns on the processing of your personal data, to reach our data protection officer, or additional information on this privacy notice please contact us at info@medizen.co.uk
