PRIVACY POLICY

Privacy Policy
At Pebble and Polish, your privacy is taken seriously. This policy outlines how we collect, store, and use your personal information, in line with UK GDPR and data protection laws.
1. What Information We Collect
We may collect and store the following information:
-
Your name, email address, phone number, and postal address
-
Health-related information relevant to your treatments (e.g. allergies, medical conditions)
-
Patch test records and consultation forms
-
Appointment history and preferences
2. How We Use Your Information
Your information is used solely for the purpose of:
-
Managing your bookings and appointments
-
Providing safe, tailored treatments
-
Communicating important updates (e.g. appointment reminders, policy changes)
-
Maintaining health and safety records
-
Complying with legal and insurance obligations
3. How We Store Your Information
-
Your data is stored securely, either digitally (with password protection) or in locked files.
-
Only authorised staff have access to your personal information.
-
We never share your data with third parties without your explicit consent, unless legally required.
4. Marketing Communications
-
We may occasionally send updates or offers via email or SMS.
-
You can opt out at any time by clicking "unsubscribe" or contacting us directly.
5. Your Rights
You have the right to:
-
Access, update or correct your personal data
-
Request deletion of your data (where legally permitted)
-
Withdraw consent for use of your data
-
Raise a complaint with the Information Commissioner’s Office (ICO)
6. Retention of Data
Client records are retained for up to 7 years (or 7 years after the age of 18 for minors) as required by our insurance provider and industry regulations.