Haus of Ästhetik Ltd is required to verify identity and, where applicable, legal authority before processing any Subject Access Request. Requests submitted by representatives will only be progressed once satisfactory evidence of authority has been received and verified.
A Subject Access Request will only be treated as valid where the primary and secondary identification provided meets the required standard. The statutory response period will not commence until the request is deemed valid following verification.
Haus of Ästhetik Ltd is only able to disclose personal data that it holds and controls directly. Records held independently by third parties, including booking systems, pharmacies, insurers, or other service providers, are outside its control and must be requested directly from those organisations.
Disclosure is limited to personal data held at the time the request is processed. Haus of Ästhetik Ltd is not required to create new records, explanations, summaries, timelines, or opinions in response to a Subject Access Request.
Disclosure of information does not constitute confirmation of accuracy, completeness, agreement with, or acceptance of any interpretation, allegation, or conclusion that may be drawn from the data disclosed.
Certain information may be lawfully withheld or redacted. Redactions may be applied within documents where necessary to protect the rights and freedoms of others, including third-party confidentiality, safeguarding considerations, legal privilege, or where disclosure would be likely to cause serious harm to the physical or mental health of any individual.
Personal data that has been lawfully deleted in accordance with retention policies prior to receipt of a valid Subject Access Request cannot be recovered or disclosed.
Subject Access Requests are ordinarily fulfilled by secure electronic disclosure at no cost. Alternative formats, including physical copies or portable media, may incur an administrative fee as set out in the accompanying information.
Once personal data has been securely disclosed, responsibility for its safe storage, handling, and onward transmission rests with the recipient.
Haus of Ästhetik Ltd reserves the right to refuse or charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive, in accordance with Article 12(5) of the UK GDPR.