Privacy Policy

Sirona Aesthetics (“we”, “us”) is a United Kingdom wholesaler of aesthetic and prescription-only medical products, supplying registered healthcare professionals and clinics.

We are the data controller for the personal data described in this policy. Our registered company name is [REGISTERED COMPANY NAME], company number [COMPANY NUMBER], registered office [REGISTERED OFFICE ADDRESS]. We are registered with the Information Commissioner’s Office under registration number [ICO REGISTRATION NUMBER].

When you register for a trade account we collect:

• Your name, business email address, telephone number and clinic name.
• Your business or delivery address.
• Your profession and professional registration details (for example your GMC, GDC, NMC or GPhC number), which we use to verify that you are entitled to purchase the products you are ordering.
• The declarations you make during registration about your professional status and intended use of the products.

When you place an order we also collect order history and delivery details. Card payments are processed by Stripe; we do not receive or store your full card details.

When you contact us through the website we collect the details you submit in that form so we can respond.

• To perform our contract with you — creating and managing your account, processing and delivering orders, and providing support.
• To comply with a legal obligation — verifying professional eligibility before supplying prescription-only medicines, and keeping the records required of a licensed wholesaler.
• For our legitimate interests — preventing fraud and misuse, securing our systems, and improving our service.
• With your consent — where we send you marketing about products and training. You can withdraw consent at any time.

We share personal data only with parties who help us run the business:

• Our payment processor, for taking payment.
• Our delivery partners, for fulfilling your order.
• Our customer relationship and email providers, for account notifications and support.
• Regulators and law enforcement, where we are legally required to do so.

We do not sell personal data.

Our website and database are hosted on servers located in [HOSTING REGION — e.g. London, United Kingdom]. Where a provider processes data outside the UK, we rely on the appropriate safeguards permitted under UK data protection law.

We keep account and order records for [RETENTION PERIOD] in order to meet our legal and regulatory obligations as a wholesaler, after which they are deleted or anonymised. Enquiry messages are kept for [ENQUIRY RETENTION PERIOD].

Under UK GDPR you have the right to access your personal data, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, and to data portability. To exercise any of these rights, contact [DATA PROTECTION CONTACT EMAIL].

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

We use cookies that are strictly necessary for the website to function, including keeping you signed in and remembering the contents of your basket. [CONFIRM WHETHER ANALYTICS OR MARKETING COOKIES ARE IN USE — if they are, a consent banner is required]

We may update this policy from time to time. The date at the top of this page shows when it was last revised.