Privacy Policy

1. Who We Are

Omnera™ is operated by Omnera Data Group Ltd, a company registered in England & Wales (company number 16317711) with its registered office at 3rd Floor, 45 Albemarle Street, Mayfair, London, W1S 4JL. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Omnera Data Group Ltd is the data controller of the personal information described in this policy.

Questions about this policy or our data practices can be sent to info@omnera.co.uk.

2. Information We Collect

3. Business and Practitioner Information We Aggregate

Our platform provides business intelligence about aesthetic and healthcare businesses in the UK. To do this, we collect and process information from publicly available sources, including:

• Public business listings, including ratings and reviews
• Information published by businesses themselves, such as on their own websites
• Regulatory data and inspection ratings for regulated healthcare providers
• Public professional registers, used for practitioner verification
• Geographic and location data for territory mapping

Some of this information may constitute personal data — for example, the name of a practitioner published on a clinic website or on a public professional register. We process this information under the lawful basis of legitimate interests (Article 6(1)(f) UK GDPR): providing accurate, verifiable business-to-business market intelligence about commercially active businesses and the qualifications they publicly advertise. We only process information that has been made publicly available in a business context, and we do not collect special category data.

If you are a business owner or practitioner and would like information about you reviewed, corrected, or removed from our platform, contact us at info@omnera.co.uk and we will respond in accordance with your rights described in section 8.

4. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services:

• Provide and operate our business intelligence platform (performance of our contract with you)
• Process subscriptions and invoicing (performance of contract and legal obligation)
• Send technical notices, updates, and support messages (performance of contract)
• Respond to your comments, questions, and customer service requests (legitimate interests)
• Monitor and analyse trends, usage, and platform performance (legitimate interests)
• Detect, investigate, and prevent unauthorised access or misuse (legitimate interests and legal obligation)

5. Third-Party Services

We use a small number of third-party services to provide our platform:

• Google Maps — interactive mapping and location services displayed within the platform
• Xero — invoicing and billing management
• Cloud infrastructure providers — hosting of our application and databases
• AI service providers — automated data processing that supports our platform

Where these providers process personal data on our behalf, they do so under contracts that meet the requirements of UK GDPR. Each of these services also has its own privacy policy governing how it processes data.

6. Information Sharing and Disclosure

We do not sell your personal information. We only share it in the following circumstances:

• With your consent or at your direction
• To comply with legal obligations or respond to lawful requests from authorities
• To protect our rights, property, or safety, or that of others
• With service providers who assist in our operations, under contractual confidentiality obligations
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in controller

7. Data Security and Retention

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction, including encryption of data in transit and at rest, access controls and authentication requirements, and regular security reviews.

We retain account information for as long as your account is active and for a reasonable period afterwards to comply with our legal, accounting, and reporting obligations. Aggregated business intelligence data is retained for as long as it remains accurate and relevant to the service, and is refreshed or corrected on an ongoing basis.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data, whether you are a user of our platform or an individual whose information appears in it:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent where processing is based on consent

To exercise any of these rights, contact us at info@omnera.co.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk, although we would welcome the opportunity to address your concerns first.

9. Cookies and Local Storage

We keep tracking to a minimum. Our platform uses browser local storage and strictly necessary cookies solely to keep you signed in, remember your session activity, and operate core platform features. We do not use advertising cookies, and we do not use third-party analytics or tracking cookies on our platform. Embedded services such as Google Maps may set their own cookies when you use mapping features; these are governed by Google’s own policies.

10. International Data Transfers

Some of our service providers process data outside the UK. Where personal data is transferred internationally, we ensure the transfer is protected by appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement / standard contractual clauses approved for use in the UK.

11. Changes to This Policy

We may update this privacy policy from time to time. We will post the updated policy on this page and revise the “Last updated” date above. Where a change materially affects how we process your personal data, we will take reasonable steps to bring it to your attention.