Who We Are
The Aesthetics Nurse by Hayley is an aesthetic treatments practice based at 38 Market Place, Fakenham, NR21 9BY, operated by Hayley Murfit. We are registered with the Information Commissioner's Office (ICO).
If you have any questions about this policy or your data, contact us at hayley@theaestheticsnursebyhayley.co.uk or call 07826 522724.
What We Collect
When you submit a consultation enquiry through our website, we collect:
- Your name
- Phone number
- Email address (optional)
- Treatment of interest
- Preferred appointment day/time
- Any additional message you include
We do not collect medical history, health data, or payment details through this website form.
How We Use Your Data
We use the information you provide to:
- Respond to your consultation enquiry
- Arrange and confirm your appointment
- Send you an SMS confirmation that your enquiry has been received
We will not use your contact details for marketing purposes unless you specifically ask us to. We will never sell or share your data with third parties for their marketing.
Our Legal Basis
We process your data based on legitimate interest (you contacted us and expect a response) and, where applicable, consent (you chose to submit the form). You can withdraw your consent at any time by contacting us.
Where Your Data Is Stored
Your enquiry data is stored securely in:
- Netlify (form submission host, EU/US servers, encrypted)
- Google Sheets (booking log, access restricted to Hayley only)
Your data is transmitted over HTTPS (encrypted in transit) and stored in access-controlled systems. Only Hayley and her appointed business support have access to your booking information.
SMS Notifications
When you submit a consultation enquiry, you will receive a single SMS confirmation to the phone number you provided. This is a one-time service message confirming your enquiry was received. It is not marketing, and you will not be added to any messaging list.
How Long We Keep Your Data
Consultation enquiry data is kept for up to 12 months from the date of submission, or until your treatment course is complete, whichever is later. After this period, your data is deleted from our systems.
If you become a client, your clinical records are managed separately through our clinical records system (Faces) and retained in line with healthcare record-keeping requirements.
Your Rights
Under UK GDPR, you have the right to:
- Access the data we hold about you
- Correct any inaccurate data
- Delete your data (right to be forgotten)
- Withdraw consent at any time
- Complain to the ICO if you are unhappy with how your data is handled
To exercise any of these rights, email hayley@theaestheticsnursebyhayley.co.uk.
Cookies
This website does not use tracking cookies, analytics cookies, or advertising cookies. No third-party trackers are loaded.
Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date below.
Last updated: 22 March 2026