Privacy policy
Effective date: 2 August 2026
This Privacy Policy explains how Skin & Lash Theory ("we", "us", "our") collects, uses, and protects your personal data when you visit our website and when you contact or book with us.
1) Who we are
Skin & Lash Theory is the controller of your personal data for the purposes of UK data protection law.
Contact detailsEmail: Hello@skinandlashtheory.co.uk Address: 20 James St, Kimberley, Nottingham, NG16 2L
2) The personal data we collect
We may collect and process the following categories of personal data:
Contact details: name, email address, phone number
Booking details: appointment date/time, service requested, and notes you choose to provide
Payment information: payment status and transaction references (we do not store full card details if payments are handled by a payment provider)
Website usage data: IP address, device information, browser type, pages visited, and approximate location
Messages you send us: enquiries submitted via forms, email, phone, or social media
3) How we collect your data
We collect data when you:
Use our website
Submit an enquiry form
Book an appointment (online or by contacting us)
Purchase a product or service
Subscribe to marketing communications (where offered)
Accept or manage cookie preferences
4) How we use your personal data
We use your personal data to:
Provide and manage bookings and services
Respond to enquiries and customer service requests
Take payments and manage refunds (if applicable)
Send appointment confirmations and reminders
Improve our website, services, and customer experience
Send marketing communications where you have consented (or where permitted by law)
Keep our website secure and prevent fraud
5) Our lawful bases for processing
Under UK GDPR, we rely on one or more of the following lawful bases:
Contract: to provide services you request (e.g., booking and delivering treatments)
Legitimate interests: to run and improve our business, keep records, and keep our website secure
Consent: for marketing communications and non-essential cookies
Legal obligation: where we must comply with legal or regulatory requirements
6) Cookies and tracking
Our website uses cookies and similar technologies.
Essential cookies help the website function properly.
Analytics cookies help us understand how visitors use our website and improve it.
Marketing cookies may be used to measure advertising performance (if enabled).
You can manage cookie preferences through our cookie banner (where available) and through your browser settings.
7) Sharing your data
We may share your personal data with trusted third parties where necessary to run our business, such as:
Website hosting and IT providers
Fresha (our booking and appointment management provider, and a payment provider for card payments where used)
Banking providers (to process bank transfers)
Email and communications providers
Analytics providers (e.g., Google Analytics)
Professional advisers (accountants, legal advisers)
We only share the data required for them to provide their services.
8) International transfers
Some of our service providers may store or process data outside the UK. Where this happens, we will ensure appropriate safeguards are in place (such as UK adequacy regulations or appropriate contractual protections).
9) How long we keep your data
We keep personal data only for as long as necessary for the purposes set out in this policy, including:
To provide services and manage bookings
To comply with legal, tax, or accounting requirements
To resolve disputes and enforce agreements
Retention periods vary depending on the type of data and why we hold it.
10) Your rights
You have rights under UK GDPR, including:
The right to access your personal data
The right to correct inaccurate data
The right to request deletion of your data (in certain circumstances)
The right to restrict processing (in certain circumstances)
The right to object to processing (in certain circumstances)
The right to data portability (in certain circumstances)
The right to withdraw consent at any time (where processing is based on consent)
To exercise your rights, contact us using the details above.
11) Complaints
If you have concerns, you can contact us first so we can try to resolve the issue.
You also have the right to complain to the UK supervisory authority:
Information Commissioners Office (ICO)Website: https://ico.org.uk
12) Keeping your data secure
We use appropriate technical and organisational measures to protect your personal data. However, no method of transmission over the internet is completely secure.
13) Links to other websites
Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites.
14) Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the effective date.
15) Contact us
If you have questions about this Privacy Policy or how we handle your data, contact:
Email: Hello@skinandlashtheory.co.uk
Address: 20 James St, Kimberley, Nottingham, NG16 2L