Privacy Policy

Last updated: 6 October 2026

For patients using Aesthetic Preview

Who we are

Aesthetic Preview ("we") is operated by Lily Harney, contact: hello@aestheticpreview.com. ICO registration is in progress.

When you use Aesthetic Preview through a clinic's link, the clinic decides why and how your data is used, and we process it on the clinic's behalf. We act as the clinic's data processor.

What we process

• The photos you take or upload.
• Measurements taken from your photos (such as facial landmark positions) to position the simulation.
• The treatments, amounts and goals you select.
• Basic technical data (device type, browser, approximate usage statistics) with no link to your identity.

Why we process it, and our legal basis

• To create a simulation of treatments on your face. Legal basis: your explicit consent.
• To keep the service secure and working. Legal basis: legitimate interests.
• Anonymous usage statistics for the clinic (for example, which treatments are popular). No photos or personal details are included.

Facial images can be sensitive. We ask for your explicit consent before every session and do not use your images to identify you.

How long we keep it

Photos and simulated results are held in your browser session only and are deleted when you close the session. We do not store them on our servers or in a database. If you choose "Send this plan to my practitioner", the plan summary and contact details you choose to send are shared with the clinic — your photos are never sent.

Who we share it with

• OpenAI (via the Lovable AI Gateway), which generates the preview images. Photos are sent securely for this purpose only and are not retained or used to train models, per our provider's terms.
• Lovable Cloud for secure hosting.
• The clinic, only if you choose to send them your plan.

We do not sell your data.

International transfers

Some providers process data outside the UK. Where they do, we rely on UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or other approved safeguards.

Your rights

You can ask to access, correct or delete your data, object to or restrict processing, and withdraw consent at any time. Because we do not store your photos, there is usually nothing to delete after your session ends. To exercise your rights, contact the clinic or hello@aestheticpreview.com.

Complaints

You can complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Children

This service is for people aged 18 and over.

Changes

We will update this page if our practices change.

For clinics and practitioners (account holders)

We are the controller of the data you give us when you create an account.

What we collect: your name, email, clinic name, phone number, branding (logo, colours), treatment menu and prices, billing details (handled by Stripe; we do not store full card numbers), and usage data (sessions, generation counts, feature usage).

Why: to provide and secure the service, take payment, support you, and improve the product. Legal bases: contract, legitimate interests, and legal obligation (tax records).

Who we share it with: Stripe (payments), our hosting and database providers, our email provider, and our AI provider (patient simulations only). We do not sell your data.

Retention: account data is kept while your subscription is active and for 6 years after for accounting and legal purposes. Demo request details are kept for 12 months.

Your rights and complaints: as above. Contact hello@aestheticpreview.com or the ICO.