How Omnera Data Group Ltd collects, uses, and protects personal information, and the rights available to you under UK data protection law.
Last updated: 30 October 2026
Omnera™, the record of UK aesthetic clinics and every recorded change to them, used by manufacturers and distributors, deal teams, lenders, patient-finance providers and software vendors, is operated by Omnera Data Group Ltd, a company registered in England & Wales (company number 16317711) with its registered office at 3rd Floor, 45 Albemarle Street, Mayfair, London, W1S 4JL. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Omnera Data Group Ltd is the data controller of the personal information described in this policy. We are registered with the Information Commissioner’s Office (ICO) under registration reference ZC047753.
Questions about this policy or our data practices can be sent to info@omnera.co.uk.
We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support:
We automatically collect certain information about how you use our services, including:
Our platform provides market intelligence about aesthetic and healthcare businesses in the UK. To do this, we collect and process information from publicly available sources, including:
Some of this information may constitute personal data — for example, the name of a practitioner published on a clinic website or on a public professional register. We process this information under the lawful basis of legitimate interests (Article 6(1)(f) UK GDPR): providing accurate, verifiable business-to-business market intelligence about commercially active businesses and the qualifications they publicly advertise. We only process information that has been made publicly available in a business context, and we do not collect special category data.
For the company matched to each clinic, we hold what the Companies House public register publishes about its officers: name, role, appointment and resignation dates, and month and year of birth. This information is used for two purposes only: to record director changes as dated change events, and to derive flags and bands on the clinic itself (such as founder-led, years trading, and a retirement-window band). Month and year of birth are used solely to derive those bands; they never leave our systems and are never displayed. Where a practitioner a clinic names on its own website has the same name as an officer of the matched company, we link the two; a link below 80% confidence is held for human review and is not used until confirmed, and the link appears only as a founder-led flag on the clinic, never as a personal record.
The lawful basis is legitimate interests (Article 6(1)(f) UK GDPR): the register exists so that those dealing with a company can see who runs it, and that is the only use we make of it. We do not build or show a profile of any individual, no officer is shown outside the context of their company, and our licence terms prohibit using Omnera to contact an individual officer. Officer data is kept only while the company remains matched to a clinic; a resigned officer remains only as a dated resignation event. An officer can ask for their record to be reviewed or removed at any time by emailing info@omnera.co.uk. Our data protection summary sets out the full legitimate interests assessment, hosting and retention periods.
If you are a business owner, practitioner, or company officer and would like information about you reviewed, corrected, or removed from our platform, contact us at info@omnera.co.uk and we will respond in accordance with your rights described in section 8.
We use the information we collect to provide, maintain, and improve our services:
We use a small number of third-party services to provide our platform:
Where these providers process personal data on our behalf, they do so under contracts that meet the requirements of UK GDPR. Each of these services also has its own privacy policy governing how it processes data.
We do not sell your personal information. We only share it in the following circumstances:
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction, including encryption of data in transit and at rest, access controls and authentication requirements, and regular security reviews.
We retain account information for as long as your account is active and for a reasonable period afterwards to comply with our legal, accounting, and reporting obligations. Aggregated market intelligence data is retained for as long as it remains accurate and relevant to the service, and is refreshed or corrected on an ongoing basis. Our observations of clinics (website crawls, public listings, register states) and their change history are retained indefinitely as public, business-context data: that history is what every dated figure on the platform rests on. Company officer data is retained while the company is matched to a clinic and is refreshed from the Companies House register; a resigned officer stays only as a dated resignation event. Customer lists uploaded to us are deleted within 30 days of the licence ending. The full retention table is on our data protection page.
Under UK GDPR, you have the following rights in relation to your personal data, whether you are a user of our platform or an individual whose information appears in it — a practitioner named on a clinic website or professional register, or an officer of a company matched to a clinic:
To exercise any of these rights, contact us at info@omnera.co.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk, although we would welcome the opportunity to address your concerns first.
We keep tracking to a minimum. Our platform uses browser local storage and strictly necessary cookies solely to keep you signed in, remember your session activity, and operate core platform features. We do not use advertising cookies, and we do not use third-party analytics or tracking cookies on our platform. Embedded services such as Google Maps may set their own cookies when you use mapping features; these are governed by Google’s own policies.
Some of our service providers process data outside the UK. Where personal data is transferred internationally, we ensure the transfer is protected by appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement / standard contractual clauses approved for use in the UK.
We may update this privacy policy from time to time. We will post the updated policy on this page and revise the “Last updated” date above. Where a change materially affects how we process your personal data, we will take reasonable steps to bring it to your attention.