1. Who We Are
Bossa Wax Studio is a sole-trader beauty business operated by Maria Eldridge, trading as Bossa Wax Studio, based in Gravesend, Kent. For the purposes of UK data protection law, Bossa Wax Studio is the Data Controller. Contact: bossawaxstudio@gmail.com
2. What Personal Data We Collect
- Identity data: first name, last name
- Contact data: phone number, email address
- Booking data: appointment dates, services booked, booking history
- Health and consultation data: allergy information, skin sensitivities, medical conditions relevant to treatment, patch test results
- Usage data: information about how you use our website (via cookies)
- Communications data: messages sent to us via WhatsApp or email
We do not collect payment card data directly. Payments are processed by third-party payment processors subject to their own privacy policies.
3. Special Category Data
Health-related information collected during your consultation is classified as Special Category Data under Article 9 of UK GDPR. We collect this data solely to provide safe and appropriate treatment. You will be asked to provide explicit consent via your consultation form before your first appointment.
4. How We Use Your Personal Data
- To book, confirm and manage your appointments
- To send appointment reminders and follow-up messages
- To carry out safe and appropriate treatments
- To respond to your enquiries and communications
- To send marketing communications (only with your explicit consent)
- To comply with our legal obligations
5. Legal Basis for Processing
- Contract: Processing necessary to fulfil the appointment booking
- Legitimate interests: Sending appointment reminders and responding to enquiries
- Explicit consent: Health/consultation data; marketing communications
- Legal obligation: Retaining records as required by law
6. How Long We Keep Your Data
- Treatment/consultation records: 7 years from your last appointment
- Marketing consent records: Until you withdraw consent, or 2 years from last contact, whichever is sooner
- General communications: 12 months
7. Who We Share Your Data With
We do not sell your personal data. We may share your data with: online booking platforms, email and messaging services, payment processors, and website analytics (anonymised data). All third-party processors provide adequate data protection guarantees.
8. Your Rights Under UK GDPR
- Right of access: request a copy of the data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your data
- Right to restrict processing: request we limit how we use your data
- Right to data portability: receive your data in a structured format
- Right to object: object to processing based on legitimate interests
- Right to withdraw consent: withdraw consent at any time
Contact: bossawaxstudio@gmail.com. We will respond within one calendar month.
9. How to Complain
You have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.
10. Cookies
Our website uses cookies. Please see our Cookie Policy for full details.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact
For any privacy-related queries: bossawaxstudio@gmail.com