Privacy Policy

Last updated: 28 September 2026

This Privacy Policy explains how Axiom Biolabs Ltd, trading as Aesthetics Growth Co ("Aesthetics Growth Co", "we", "us" or "our"), collects, uses, stores and protects personal information when you visit our website, submit an enquiry, book a consultation, communicate with us or use our services.

We are committed to handling personal information fairly, transparently and securely in accordance with applicable UK data protection and privacy laws, including the UK GDPR, the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations.

1. Information We Collect

Depending on how you interact with us, we may collect:

• Your name;
• Email address;
• Telephone or mobile number;
• Business or clinic name;
• Website or social media information;
• Information you provide through our enquiry or assessment forms;
• Information relating to your clinic, marketing activities, advertising, capacity, services and growth objectives;
• Appointment and consultation information;
• Communications between you and Aesthetics Growth Co;
• Information necessary to provide our services and manage our commercial relationship;
• Technical information such as IP address, browser type, device information and website usage data; and
• Cookie, analytics and advertising information.

We only ask for information that is reasonably necessary for the purpose for which it is being collected.

2. How We Collect Information

We may collect personal information when you:

• Complete a form on our website;
• Request a Clinic Growth Call or other consultation;
• Book an appointment using our online calendar;
• Opt in to receive email or SMS communications;
• Contact us by email, phone, SMS or another communication channel;
• Become a client of Aesthetics Growth Co; or
• Browse or interact with our website.

3. How We Use Your Information

We may use personal information to:

• Respond to enquiries and requests;
• Arrange and manage consultations and appointments;
• Send appointment confirmations and reminders;
• Follow up regarding an enquiry you have made;
• Assess whether our services may be suitable for your business;
• Provide, manage and improve our services;
• Maintain client and business records;
• Provide customer support;
• Send marketing communications where permitted by law;
• Measure and improve the performance of our website and advertising;
• Protect the security and integrity of our systems;
• Comply with legal, regulatory, accounting and tax obligations; and
• Establish, exercise or defend legal claims where necessary.

4. Our Lawful Bases for Processing

Depending on the activity, we may rely on one or more lawful bases for processing personal information.

Consent

We may rely on your consent where you have actively agreed to receive particular marketing or messaging communications or where consent is otherwise required by law. You may withdraw consent at any time.

Contract

Where you become a client, we may process information where necessary to enter into or perform our agreement with you.

Legitimate Interests

We may process information where necessary for our legitimate business interests, including responding to enquiries, operating our business, improving our services, preventing fraud and maintaining the security of our systems, provided those interests are not overridden by your rights and interests.

Legal Obligation

We may process information where necessary to comply with legal, regulatory, tax or accounting obligations.

5. SMS and Text Message Communications

Where you separately choose to opt in to SMS communications from Aesthetics Growth Co, we may use your mobile number to send messages relating to your enquiry, consultation or appointment.

These may include:

• Confirmation that we have received your enquiry;
• Consultation or appointment confirmations;
• Appointment reminders;
• Relevant follow-up regarding an enquiry you submitted; and
• Customer service communications connected with your request.

Message frequency may vary. Message and data rates may apply depending on your mobile provider.

You can stop receiving SMS messages at any time by replying STOP. You may reply HELP for assistance or contact us at [email protected].

Consent to receive SMS messages is not a condition of purchasing our services or submitting an enquiry.

If we introduce promotional or marketing SMS communications, those messages will only be sent where an appropriate separate marketing consent or other lawful permission has been obtained.

We do not sell, rent or transfer SMS opt-in consent or mobile subscriber information to third parties for their own marketing or promotional use. Service providers involved in the technical delivery and operation of our messaging systems may process information only as necessary to provide those services on our behalf.

6. Email Communications

We may send email communications relating to an enquiry, appointment, service or existing business relationship.

Where required, promotional email communications will only be sent where we have an appropriate legal basis to do so. You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or by contacting us.

7. Cookies, Analytics and Advertising Technologies

Our website may use cookies, pixels and similar technologies to operate the website, understand how visitors use it and measure the effectiveness of our advertising.

These technologies may include:

• Google Analytics 4 (GA4) for website analytics;
• Meta Pixel for advertising measurement and audience analytics;
• Google Ads conversion tracking for measuring advertising performance; and
• Necessary technologies used by our website and CRM provider.

Where applicable, non-essential cookies and tracking technologies should only be activated after the appropriate consent has been obtained. You can also manage cookies using your browser settings and, where available, our website cookie controls.

8. Service Providers and Data Sharing

We may use carefully selected service providers to help us operate our business and provide our services. These may include providers of:

• CRM, forms, calendar and automation services, including GoHighLevel;
• SMS and telecommunications infrastructure;
• Email delivery services;
• Website hosting and technical infrastructure;
• Analytics services, including Google;
• Advertising services, including Meta and Google;
• Payment, accounting or professional services where applicable; and
• IT, security and business administration services.

These organisations may process personal information on our behalf only where necessary to provide their services, subject to appropriate contractual and security requirements.

We may also disclose information where required by law, regulation, court order or another lawful authority, or where necessary to protect our legal rights.

We do not sell personal information.

9. International Data Transfers

Some of the technology providers we use operate internationally and may process information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure that an appropriate legal transfer mechanism or safeguard is used where required by applicable data protection law.

10. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting and regulatory requirements.

As a general guide:

• Enquiry and prospect information may normally be retained for up to 24 months after the last meaningful interaction unless there is a reason to retain it for longer or you ask us to delete it.
• Client, contractual, financial and transaction records may normally be retained for up to 6 years after the relevant relationship or transaction where appropriate for tax, accounting or legal purposes.
• Marketing consent and suppression records may be retained for as long as reasonably necessary to demonstrate consent or ensure that an opt-out request continues to be respected.

11. Data Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, destruction or loss.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Your Data Protection Rights

Depending on the circumstances, you may have rights in relation to your personal information, including the right to:

• Request access to your personal information;
• Request correction of inaccurate information;
• Request deletion of your information;
• Request restriction of processing;
• Object to certain processing;
• Request transfer of information in certain circumstances;
• Withdraw consent where processing is based on consent; and
• Object to the use of your personal information for direct marketing.

To exercise any of these rights, contact [email protected].

You also have the right to raise a concern or make a complaint to the UK Information Commissioner's Office (ICO).

13. Third-Party Websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of websites or services that we do not control. You should review their privacy information before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or business practices. The latest version will be published on this page and the "Last updated" date will be changed accordingly.

15. Contact Us

If you have questions about this Privacy Policy or how we use personal information, please contact: