Privacy Policy

1. Introduction

Bella Galore Skin Lounge is committed to protecting your privacy and handling your personal information with care, discretion and transparency.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, book an appointment, purchase a treatment or receive services from us.

We handle your information in accordance with applicable UK data protection laws, including the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

We may collect the following information:

• Personal details: Your name, email address, telephone number and other contact information.
• Appointment information: Your bookings, treatment history, cancellations and payment-related records.
• Skin analysis and consultation information: Your skin type, skin concerns, allergies, sensitivities, relevant medical history, medications and other information you provide to help us assess treatment suitability.
• Photographs: Before-and-after treatment photographs, where applicable and with your permission.
• Payment information: Relevant transaction details processed through our payment provider. We do not intend to store your full payment card details.
• Website information: Technical information such as your IP address, device information and cookie data, where applicable.

3. How We Use Your Information

We collect and use your information to:

• Manage appointments and bookings.
• Conduct consultations and skin analyses.
• Assess treatment suitability and help provide appropriate treatments.
• Maintain client records and treatment plans.
• Communicate appointment confirmations, reminders and aftercare advice.
• Process payments and manage refunds where applicable.
• Respond to enquiries, complaints and requests.
• Improve our services and meet applicable legal obligations.
• Send promotional offers and marketing communications where permitted and, when required, with your consent.

We will not use your personal information for unrelated purposes without an appropriate lawful basis.

4. Sensitive Personal Information

Information about your health, allergies, medications and certain skin conditions may qualify as special category personal data under UK data protection law.

We collect only information that is relevant to providing safe and appropriate treatments.

Where required, we will obtain your explicit consent to process sensitive information and explain why it is needed. You may withdraw consent where consent is the basis for processing, although this may affect our ability to provide certain treatments safely.

Your consultation and treatment records will be handled confidentially and accessed only where necessary.

5. Photographs and Marketing

Before-and-after photographs may help us monitor treatment progress and maintain appropriate client records.

We will obtain your permission before taking photographs for purposes requiring consent. Your images will never be used on our website, social media platforms, advertisements or other promotional materials without your separate permission.

Agreeing to receive a treatment does not mean you agree to appear in our marketing.

You may withdraw your permission for future marketing use by contacting us. This will not make previous lawful processing unlawful, and we will explain any practical limitations on removing material that has already been published or shared.

6. Sharing Your Information

We do not sell your personal information. Where necessary, we may share relevant information with trusted service providers, including:

• Appointment booking and scheduling platforms.
• Website hosting and website service providers.
• Payment processing providers.
• Email and communication providers.
• Professional advisers or relevant authorities where required by law.

We only share information where there is an appropriate reason and lawful basis. Where service providers process information on our behalf, we take appropriate steps to ensure it is protected. If information is transferred outside the UK, we will ensure that applicable data protection requirements are met.

7. How We Store and Protect Your Information

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include password-protected systems, restricted access to client records and secure storage arrangements.

Although we take reasonable precautions, no method of electronic storage or transmission is completely secure.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, insurance and record-keeping requirements.

Retention periods may differ depending on the type of information and the circumstances.

When information is no longer required, we will securely delete it or anonymise it where appropriate.

9. Your Data Protection Rights

Under applicable data protection law, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your information in certain circumstances.
• Request that we restrict certain processing.
• Object to processing carried out on certain lawful bases.
• Request a copy of certain information in a portable format.
• Withdraw consent where processing relies on consent.
• Complain to the Information Commissioner's Office (ICO).

These rights are subject to applicable legal conditions and exemptions. To exercise your rights, please contact us using the details below.

10. Cookies and Website Tracking

Our website may use cookies or similar technologies to support website functionality, understand website usage and improve your experience.

Where required, we will request your consent before using non-essential cookies or tracking technologies. You can manage available cookie preferences through our website's cookie settings, where provided.

11. Third-Party Websites

Our website may contain links to external websites or booking platforms. These services may have their own privacy policies and data-handling practices.

We encourage you to review their privacy notices before providing personal information. Bella Galore Skin Lounge is not responsible for the privacy practices of independent third-party websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices or legal requirements.

The latest version will be made available on our website, together with its effective date.

13. Contact Us

If you have any questions about this Privacy Policy, how we handle your information or how to exercise your data protection rights, please contact:

14. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the UK Information Commissioner's Office.

Website: https://ico.org.uk/