Legal
Privacy notice
Last updated: [DATE]
Template wording: replace every [PLACEHOLDER] and check it matches how the business really handles personal data before publishing. This is not legal advice.
Who we are
Petal & Pearl Beauty is a trading name of [LEGAL BUSINESS NAME] (“we”, “us”), [REGISTERED ADDRESS]. [Registered in England & Wales, company number COMPANY NUMBER.] We are the data controller for personal information collected through this website. ICO registration number: [ICO REGISTRATION NUMBER].
Questions about this notice or your data: email [PRIVACY EMAIL] or call [PHONE NUMBER].
What we collect
- Details you give us through our enquiry form, by phone, email or in person: your name, phone number, email address, postcode or address, and details about the treatments you are interested in.
- Records of the work we carry out for you, quotes, invoices and payments.
- Basic technical information our web host records automatically (such as IP address, browser type and pages visited) to keep the site secure.
Health information
Some treatments need us to ask about allergies, skin conditions, medication or pregnancy so we can treat you safely. This is special category data. We only collect it with your explicit consent, use it only to decide whether a treatment is safe for you, and keep it secure on your client record. You can withdraw consent at any time, although we may then be unable to offer some treatments.
How we use it and our lawful basis
- To reply to your enquiry and give you a quote – taking steps at your request before entering into a contract, or our legitimate interest in responding to people who contact us.
- To carry out and manage the treatments you book – performance of a contract.
- To keep financial, tax and safety records – legal obligation.
- To send occasional news or offers – only with your consent, which you can withdraw at any time. [DELETE IF YOU DO NOT SEND MARKETING.]
Who we share it with
We never sell your data. We only share it where needed with: our website host and form/email provider ([HOSTING / EMAIL PROVIDER]); our accountant; our online booking or payment provider [NAME, IF USED]; and anyone we are legally required to share it with. These organisations may only use your data to provide their service to us.
How long we keep it
Enquiries that do not go ahead are deleted after [12 MONTHS]. Customer and financial records are kept for [6 YEARS] after the work is finished, as required for tax and warranty purposes, then securely deleted.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To make a request, contact us using the details above. We will respond within one month.
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Cookies and third-party services
This website does not set advertising or tracking cookies. [IF YOU ADD ANALYTICS OR EMBEDS, LIST THEM HERE AND ADD A COOKIE BANNER.] Our fonts are loaded from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google.
Changes to this notice
We may update this notice from time to time. The latest version will always be on this page.