Privacy Policy

1. Introduction

Estelle's Beauty & Aesthetics ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our beauty and aesthetic services.

We are located at 10 Upper High St, Epsom, KT17 4QJ, and can be contacted at info@estellesbeauty.co.uk or 0750 8128814.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number, postal address)
• Appointment booking information
• Medical history and skin condition information relevant to treatments
• Payment information (processed securely through third-party providers)
• Communication preferences
• Photos for treatment documentation (with explicit consent)

2.2 Website Usage Information

• IP address and browser information
• Pages visited and time spent on our website
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing beauty and aesthetic treatments and services
• Booking and managing appointments
• Processing payments
• Communicating with you about your treatments and appointments
• Maintaining treatment records for health and safety purposes
• Sending marketing communications (with your consent)
• Improving our services and website functionality
• Complying with legal obligations

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To provide services you have requested
• Consent: For marketing communications and photography
• Legitimate Interest: For business operations and service improvement
• Legal Obligation: For record-keeping and regulatory compliance

5. Information Sharing

We do not sell your personal information. We may share your information with:

• Third-party booking platforms (e.g., Treatwell) for appointment management
• Payment processors for secure transaction processing
• Healthcare professionals when medically necessary
• Legal authorities when required by law

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Secure storage of physical and digital records
• Regular security assessments
• Staff training on data protection
• Encrypted data transmission

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Treatment records: 8 years (as required by professional guidelines)
• Marketing communications: Until you withdraw consent
• Website analytics: 26 months
• Financial records: 6 years (as required by law)

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Request limitation of processing
• Portability: Request transfer of your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: For consent-based processing

To exercise these rights, contact us at info@estellesbeauty.co.uk or 0750 8128814.

9. Cookies

Our website uses cookies to improve your browsing experience. These include:

• Essential cookies for website functionality
• Analytics cookies to understand website usage
• Preference cookies to remember your settings

You can control cookies through your browser settings, though this may affect website functionality.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.