Privacy Policy
Effective Date: January 2026
Last Updated: January 2026
At Unyqe Beauty Studio, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with UK GDPR regulations.
1. Who We Are
Company Name: Unyqe Beauty Ltd
Company Number: 15929497
Registered in: England
Registered Office: 7 Bell Yard, London WC2A 2JR
For any privacy-related questions or concerns, please contact us at:
Email: [email protected]
Address: 7 Bell Yard, London EC2A 2JR
2. What Information We Collect
Enquiry Information
When you contact us or make an enquiry, we collect:
- Your name
- Email address
- Phone number
- Any information you provide in your enquiry
Client Records
When you book or receive treatments, we collect:
- Personal details (name, date of birth, address)
- Contact information (phone, email)
- Medical history and health information
- Skin concerns and treatment goals
- Treatment progression photos (with consent)
- Payment and transaction information
- Appointment history and notes
Website Usage Information
- IP address
- Browser type and version
- Pages visited and time spent
- Referring website
- Device information
3. How We Use Your Information
Treatment Delivery
- Assess your suitability for treatments
- Provide personalized treatment plans
- Monitor treatment progress
- Ensure your safety during treatments
- Maintain accurate medical records
Appointment Management
- Schedule and confirm appointments
- Send appointment reminders
- Process cancellations and rescheduling
- Follow up after treatments
Business Operations
- Process payments and refunds
- Maintain financial records
- Comply with legal and regulatory requirements
- Improve our services and treatments
- Analyze business performance
Marketing Communications
With your consent, we may use your information to:
- Send promotional emails about treatments and offers
- Share skincare tips and advice
- Notify you about new services
- Send newsletters and updates
You can opt out of marketing communications at any time by clicking unsubscribe in our emails or contacting us directly.
4. Legal Basis for Processing
We process your personal data under the following legal bases:
Contract Performance
Processing necessary to provide treatments and services you've requested
Consent
- Marketing communications
- Treatment photography
- Use of testimonials
Legal Obligation
- Maintaining medical records (8 years)
- Financial record keeping
- Responding to legal requests
Legitimate Interest
- Improving our services
- Business analytics
- Fraud prevention
5. How We Share Your Information
Internal Sharing
Your information is shared with:
- Practitioners providing your treatments
- Reception and administrative staff
- Management for business operations
All staff are trained in data protection and bound by confidentiality agreements.
Third-Party Service Providers
We may share information with trusted partners who help us operate our business:
- Payment processors (for transaction processing)
- Booking systems (for appointment management)
- Email service providers (for communications)
- Cloud storage providers (for secure data storage)
- Accounting software (for financial records)
All third parties are carefully selected and required to protect your data.
Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations
- Respond to court orders or legal processes
- Protect our rights or safety
- Prevent fraud or illegal activity
We Never:
- Sell your personal information
- Share your data with advertisers
- Use your information for purposes you haven't consented to
6. Data Retention
Client Records
We retain your treatment records for 8 years from your last appointment, as required by:
- Professional insurance requirements
- Medical record-keeping regulations
- Legal and regulatory compliance
Professional Contact Records
Business contact information retained for 8 years for:
- Regulatory compliance
- Business continuity
Marketing Data
- Retained while you remain subscribed
- Deleted within 30 days of unsubscribing
Financial Records
- Retained for 7 years as required by tax law
Website Analytics
- Anonymized data retained for up to 26 months
7. Your Rights
Under UK GDPR, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete information
Right to Erasure (Right to be Forgotten)
Request deletion of your personal data, subject to:
- Legal obligations to retain medical records (8 years)
- Financial record-keeping requirements
- Legitimate business interests
Right to Restriction
Request limitation on how we use your data
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
- Object to marketing communications (immediate effect)
- Object to processing based on legitimate interests
Right to Withdraw Consent
Withdraw consent at any time for:
- Marketing communications
- Photography and testimonials
- Optional data processing
How to Exercise Your Rights
Contact us at:
- Email: [email protected]
- Mail: 7 Bell Yard, London EC2A 2JR
We will respond to your request within one month.
8. Data Security
We implement robust security measures to protect your information:
Technical Measures
- Encrypted data transmission (SSL/TLS)
- Secure cloud storage with encryption
- Regular security updates and patches
- Firewall and anti-malware protection
- Secure password policies
Organizational Measures
- Access restricted to authorized personnel only
- Staff training on data protection
- Confidentiality agreements for all staff
- Regular security audits
- Data breach response procedures
Physical Security
- Secure premises with controlled access
- Locked filing cabinets for paper records
- Secure disposal of sensitive documents
Data Breach Notification
In the unlikely event of a data breach affecting your personal information, we will:
- Notify you within 72 hours
- Report to the ICO as required
- Take immediate action to contain the breach
- Provide guidance on protective measures
9. Cookies & Website Analytics
What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us understand how visitors use our site and improve your experience.
Cookies We Use
Essential Cookies
- Required for website functionality
- Enable booking and contact forms
- Cannot be disabled
Analytics Cookies (Google Analytics)
- Track website usage and performance
- Help us understand visitor behavior
- Anonymized data collection
- Can be disabled in browser settings
Managing Cookies
You can control cookies through your browser settings:
- Block all cookies
- Delete existing cookies
- Allow cookies from specific websites only
Note: Disabling cookies may affect website functionality.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete it immediately.
11. International Data Transfers
Your personal data is primarily stored and processed within the United Kingdom. If we need to transfer data outside the UK, we ensure:
- Adequate protection measures are in place
- Transfer is to a country with adequate data protection laws
- Appropriate safeguards such as Standard Contractual Clauses
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes:
- We will update the "Last Updated" date
- Post the new policy on our website
- Notify you via email if changes are substantial
We encourage you to review this policy periodically to stay informed about how we protect your information.
13. Complaints
Contact Us First
If you have concerns about how we handle your personal data, please contact us first:
- Email: [email protected]
- Mail: 7 Bell Yard, London EC2A 2JR
Supervisory Authority
You have the right to lodge a complaint with the UK's data protection supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
14. Contact Information
For any privacy-related questions, concerns, or requests, please contact us:
Thank you for trusting Unyqe Beauty Studio with your personal information. Your privacy is important to us.