Privacy Policy

Effective Date: January 2026

Last Updated: January 2026

At Unyqe Beauty Studio, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with UK GDPR regulations.


1. Who We Are

Company Name: Unyqe Beauty Ltd

Company Number: 15929497

Registered in: England

Registered Office: 7 Bell Yard, London WC2A 2JR

For any privacy-related questions or concerns, please contact us at:
Email: [email protected]
Address: 7 Bell Yard, London EC2A 2JR


2. What Information We Collect

Enquiry Information

When you contact us or make an enquiry, we collect:

  • Your name
  • Email address
  • Phone number
  • Any information you provide in your enquiry

Client Records

When you book or receive treatments, we collect:

  • Personal details (name, date of birth, address)
  • Contact information (phone, email)
  • Medical history and health information
  • Skin concerns and treatment goals
  • Treatment progression photos (with consent)
  • Payment and transaction information
  • Appointment history and notes

Website Usage Information

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Referring website
  • Device information

3. How We Use Your Information

Treatment Delivery

  • Assess your suitability for treatments
  • Provide personalized treatment plans
  • Monitor treatment progress
  • Ensure your safety during treatments
  • Maintain accurate medical records

Appointment Management

  • Schedule and confirm appointments
  • Send appointment reminders
  • Process cancellations and rescheduling
  • Follow up after treatments

Business Operations

  • Process payments and refunds
  • Maintain financial records
  • Comply with legal and regulatory requirements
  • Improve our services and treatments
  • Analyze business performance

Marketing Communications

With your consent, we may use your information to:

  • Send promotional emails about treatments and offers
  • Share skincare tips and advice
  • Notify you about new services
  • Send newsletters and updates

You can opt out of marketing communications at any time by clicking unsubscribe in our emails or contacting us directly.


4. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract Performance

Processing necessary to provide treatments and services you've requested

Consent

  • Marketing communications
  • Treatment photography
  • Use of testimonials

Legal Obligation

  • Maintaining medical records (8 years)
  • Financial record keeping
  • Responding to legal requests

Legitimate Interest

  • Improving our services
  • Business analytics
  • Fraud prevention

5. How We Share Your Information

Internal Sharing

Your information is shared with:

  • Practitioners providing your treatments
  • Reception and administrative staff
  • Management for business operations

All staff are trained in data protection and bound by confidentiality agreements.

Third-Party Service Providers

We may share information with trusted partners who help us operate our business:

  • Payment processors (for transaction processing)
  • Booking systems (for appointment management)
  • Email service providers (for communications)
  • Cloud storage providers (for secure data storage)
  • Accounting software (for financial records)

All third parties are carefully selected and required to protect your data.

Legal Requirements

We may disclose your information if required to:

  • Comply with legal obligations
  • Respond to court orders or legal processes
  • Protect our rights or safety
  • Prevent fraud or illegal activity

We Never:

  • Sell your personal information
  • Share your data with advertisers
  • Use your information for purposes you haven't consented to

6. Data Retention

Client Records

We retain your treatment records for 8 years from your last appointment, as required by:

  • Professional insurance requirements
  • Medical record-keeping regulations
  • Legal and regulatory compliance

Professional Contact Records

Business contact information retained for 8 years for:

  • Regulatory compliance
  • Business continuity

Marketing Data

  • Retained while you remain subscribed
  • Deleted within 30 days of unsubscribing

Financial Records

  • Retained for 7 years as required by tax law

Website Analytics

  • Anonymized data retained for up to 26 months

7. Your Rights

Under UK GDPR, you have the following rights:

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Request correction of inaccurate or incomplete information

Right to Erasure (Right to be Forgotten)

Request deletion of your personal data, subject to:

  • Legal obligations to retain medical records (8 years)
  • Financial record-keeping requirements
  • Legitimate business interests

Right to Restriction

Request limitation on how we use your data

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

  • Object to marketing communications (immediate effect)
  • Object to processing based on legitimate interests

Right to Withdraw Consent

Withdraw consent at any time for:

  • Marketing communications
  • Photography and testimonials
  • Optional data processing

How to Exercise Your Rights

Contact us at:

We will respond to your request within one month.


8. Data Security

We implement robust security measures to protect your information:

Technical Measures

  • Encrypted data transmission (SSL/TLS)
  • Secure cloud storage with encryption
  • Regular security updates and patches
  • Firewall and anti-malware protection
  • Secure password policies

Organizational Measures

  • Access restricted to authorized personnel only
  • Staff training on data protection
  • Confidentiality agreements for all staff
  • Regular security audits
  • Data breach response procedures

Physical Security

  • Secure premises with controlled access
  • Locked filing cabinets for paper records
  • Secure disposal of sensitive documents

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

  • Notify you within 72 hours
  • Report to the ICO as required
  • Take immediate action to contain the breach
  • Provide guidance on protective measures

9. Cookies & Website Analytics

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us understand how visitors use our site and improve your experience.

Cookies We Use

Essential Cookies

  • Required for website functionality
  • Enable booking and contact forms
  • Cannot be disabled

Analytics Cookies (Google Analytics)

  • Track website usage and performance
  • Help us understand visitor behavior
  • Anonymized data collection
  • Can be disabled in browser settings

Managing Cookies

You can control cookies through your browser settings:

  • Block all cookies
  • Delete existing cookies
  • Allow cookies from specific websites only

Note: Disabling cookies may affect website functionality.


10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete it immediately.


11. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we need to transfer data outside the UK, we ensure:

  • Adequate protection measures are in place
  • Transfer is to a country with adequate data protection laws
  • Appropriate safeguards such as Standard Contractual Clauses

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes:

  • We will update the "Last Updated" date
  • Post the new policy on our website
  • Notify you via email if changes are substantial

We encourage you to review this policy periodically to stay informed about how we protect your information.


13. Complaints

Contact Us First

If you have concerns about how we handle your personal data, please contact us first:

Supervisory Authority

You have the right to lodge a complaint with the UK's data protection supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk
Helpline: 0303 123 1113


14. Contact Information

For any privacy-related questions, concerns, or requests, please contact us:

Unyqe Beauty Ltd

7 Bell Yard, London EC2A 2JR

Email: [email protected]

Phone: 01952 433 125


Thank you for trusting Unyqe Beauty Studio with your personal information. Your privacy is important to us.