Privacy policy.

Allinhaus provides AI automation and workflow systems for beauty and aesthetics clinics.

For privacy questions, contact Allinhaus through LinkedIn or Instagram using the links on this page.

When you contact us, we may collect your name, clinic name, email address, message, and any project details you choose to provide.

We may also receive basic technical information from the website host, such as IP address, browser type, device information, referring page, and timestamps. This is used to keep the website secure and working properly.

Please do not send patient clinical information, treatment records, consultation transcripts, or other sensitive patient data through the public contact form.

We use enquiry information to reply to you, understand your clinic workflow, arrange an audit or call, prepare proposals, and keep records of business conversations.

If you become a client, project data, clinical workflow information, patient-related processing, integrations, and system access will be handled under a separate project agreement or data processing arrangement.

For enquiries and pre-contract conversations, we rely on taking steps before entering into a contract and our legitimate interest in responding to business enquiries.

For client delivery, we process information to perform the agreed services. Where a project involves patient or special category data, the relevant clinic remains responsible for deciding the appropriate lawful basis for its patient data, unless a separate written agreement says otherwise.

We do not sell personal information.

We may share information with service providers that help operate the website, communications, cloud hosting, file storage, project delivery, accounting, or legal compliance. They should only use the information for the service they provide to us.

We may also share information if required by law, to protect our rights, or to respond to a lawful request.

Website enquiries are normally kept for up to 12 months after the last meaningful contact unless we need them for an active project, legal record, or accounting purpose.

Client and project records may be kept for the duration of the relationship and then for as long as needed for tax, legal, insurance, or dispute purposes.

Technical logs are kept only for as long as needed by the website host for security, diagnostics, and service operation.

The current website does not intentionally use non-essential marketing cookies or analytics scripts.

If analytics, advertising pixels, embedded media, or cookie-based tools are added later, this policy should be updated and visitors should be given any required cookie choices.

Some service providers may process information outside the UK or European Economic Area. Where this happens, we expect appropriate safeguards to be used by those providers.

Depending on where you live and the information involved, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information.

You may also have the right to complain to a data protection regulator. In the UK, this is the Information Commissioner's Office.

This policy may be updated when the website, services, tools, or legal requirements change. The latest version will be posted on this page.