Privacy notice

Last updated: 5 May 2026

This notice tells you how Aesthetic Resolution ADR Limited (“AR-ADR”, “we”) collects, uses and protects personal data when you use our website or our dispute resolution service.

Who is the controller

Aesthetic Resolution ADR Limited is the controller for personal data we collect through our service. Contact details are on our contact page.

What personal data we collect

• Identity and contact: name, postal address, email address, phone number.
• Case data: details of the complaint, the trader, the treatment, dates and amounts.
• Special category data: information about your health is likely to be involved because the disputes concern medical aesthetic and cosmetic surgery treatments. We treat this with extra care.
• Evidence: documents, correspondence, photos, contracts you upload.
• Technical data: server logs (IP, user-agent, request path) for security and fraud prevention. We do not use marketing trackers.

Why we use it (lawful bases)

• Contract / pre-contract: to consider and run your case (Article 6(1)(b) UK GDPR).
• Legal obligation: to meet ADR Regulations and other legal duties (Article 6(1)(c)).
• Public interest / legitimate interests: to operate the scheme fairly and prevent fraud (Article 6(1)(e)/(f)).
• Special category data: processed under Article 9(2)(f) UK GDPR — establishment, exercise or defence of legal claims — and applicable Data Protection Act 2018 conditions.

Who we share it with

• The trader you have complained about — we share what is necessary for them to respond.
• Adjudicators and case officers handling your case.
• Service providers (hosting, secure email/CRM, audit) bound by written contracts.
• Regulators, auditors and the courts where required by law.

We do not sell your data. We do not use it for marketing.

International transfers

We aim to keep data within the UK and EEA. Any transfers outside use UK GDPR-approved safeguards (for example the UK International Data Transfer Agreement or the UK Addendum to the EU SCCs).

How long we keep it

• Case files: typically 6 years from closure, in line with limitation periods.
• Service complaint files: 6 years.
• Web server logs: 90 days.
• Application drafts that are not submitted: 30 days.

Your rights

You can ask to:

• Access your data.
• Correct inaccurate data.
• Erase data, subject to legal retention.
• Restrict or object to processing.
• Data portability where applicable.
• Withdraw consent where consent is the basis (most of our processing relies on contract or legal obligation, not consent).

Email dpo@aestheticresolution.com to exercise rights.

Security

We use HTTPS for the website. Submissions are stored in access-controlled systems. File uploads are restricted by type and size. We apply role-based access, encryption at rest where applicable, and regular review of access.

Cookies and tracking

We do not use marketing trackers. See the cookies page for details.

Complaints to the regulator

You can complain to the Information Commissioner’s Office (ICO) if you think we have mishandled your data. Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Web: ico.org.uk.

Changes to this notice

We will update this notice from time to time. The “last updated” date at the top reflects the most recent change.