Privacy policy

This policy explains how Plush Beauty Studio collects, uses and protects your personal information when you visit our website, contact us or book a treatment. We are committed to handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Plush Beauty Studio is a beauty salon and aesthetic clinic at 117 Walton Road, Woking GU21 5DW. We are the data controller for the personal information described in this policy.

If you have any questions about this policy or how we use your information, contact us:

• Email: info@wokingplushbeautystudio.com
• Phone: 01483 768284
• Post: Plush Beauty Studio, 117 Walton Road, Woking GU21 5DW

The information we collect

When you send an enquiry through our website, we collect your name, phone number, email address (if you give it), the treatment you are interested in, your preferred day and time, and any message you include.

When you contact us by phone, WhatsApp, email or Instagram, we receive the details you share with us, such as your name, phone number and the content of your messages.

When you book or have a treatment, we keep your contact details, appointment history and the treatments you have had. For some treatments, including SkinPen microneedling, chemical peels, Hydra O2 facials, lash and brow treatments that need a patch test, and massage, we ask about your health, skin, allergies and medications so we can check the treatment is safe and suitable for you.

When you buy a gift voucher, we keep a record of the voucher, its value and its expiry date, and the name of the buyer or recipient.

When you visit our website, our hosting and security systems automatically record technical information such as your IP address, browser type and the pages you visit. This is used to keep the website secure and working properly.

How we use your information

• To reply to your enquiry and arrange your appointment
• To carry out your consultation and treatment safely
• To keep accurate records of the treatments you have had
• To send you appointment reminders or contact you about your booking
• To manage gift vouchers and payments
• To protect our website from spam and misuse
• To meet our legal, insurance and regulatory obligations

We do not sell your personal information, and we do not use it for marketing unless you have asked us to.

Our legal basis for using your information

• Contract: when we need your details to respond to a booking request or provide a treatment you have asked for.
• Consent: when you tick the consent box on our enquiry form, or agree to receive offers from us. You can withdraw consent at any time.
• Legitimate interests: to run our business, keep our website secure and prevent spam, in ways you would reasonably expect.
• Legal obligation: where we must keep records for tax, insurance or regulatory reasons.

Health information is a special category of personal data. We only collect it where it is needed to provide your treatment safely, and we ask for your explicit consent on your consultation form.

Who we share your information with

We only share your information where it is needed to run our services, and only with providers who keep it secure:

• Website hosting and email providers, who store our website and deliver the enquiries you send us
• Akismet (Automattic), which checks enquiry form submissions for spam. It may process your name, email address, IP address and message for this purpose
• Google, which provides the fonts used on our website and the maps and directions links. When these load, Google receives your IP address
• WhatsApp (Meta) and Instagram (Meta), if you choose to contact us through them
• Our insurers, accountants or professional advisers, where needed
• Authorities, if we are required to by law

Some of these providers may process data outside the UK. Where they do, they use appropriate safeguards, such as the UK International Data Transfer Agreement or an adequacy decision.

How long we keep your information

• Enquiries that do not lead to a booking are deleted within 12 months.
• Client and consultation records are kept for up to 7 years after your last treatment, in line with insurance and professional guidance for aesthetic treatments.
• Gift voucher records are kept until the voucher has been used or has expired, and for as long as needed for our accounts after that.
• Financial records are kept for 6 years, as required by HMRC.

Cookies

Our website uses only the cookies it needs to work properly and stay secure. We do not use advertising cookies or tracking cookies. If we add analytics or marketing cookies in future, we will update this policy and ask for your consent first.

Keeping your information secure

Our website uses an encrypted (HTTPS) connection. Paper and digital client records are stored securely, and only our team can access them. We regularly review how we store and protect your information.

Your rights

Under UK data protection law, you have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct information that is wrong or incomplete
• Ask us to delete your information, where we do not need to keep it
• Ask us to limit how we use your information, or object to us using it
• Ask us to transfer your information to another organisation
• Withdraw your consent at any time, where we rely on consent

To use any of these rights, email info@wokingplushbeautystudio.com or call 01483 768284. We will reply within one month.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Children

Our website is not aimed at children. Where we treat a child, such as for a haircut, we take their details from a parent or guardian, who gives consent on their behalf.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.