Privacy Policy

Lavender Luxe Nails
Website: lavenderluxenails.co.uk
Last Updated: 07/09/2025

1. Introduction

Lavender Luxe Nails ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services or visit our website.

We are the data controller for the personal data we process about you. This means we are responsible for deciding how and why your personal data is used.

2. Contact Information

Data Controller: Lavender Luxe Nails
Address: 3 Windmill Close
Lower Somersham
Ipswich
IP8 4BQ
Phone: 07946545512

For any data protection queries, please contact us using the details above.

3. Personal Data We Collect

We may collect the following types of personal data:

3.1 Information You Provide to Us

Name - to identify you and personalise our service
Phone number - to contact you about appointments and send appointment reminders
Email address - to send booking confirmations, newsletters, and communications
Appointment details - including preferred services, dates, and times
Special requirements - such as allergies or accessibility needs relevant to our services

3.2 Information We Collect Automatically

Website usage data - including IP address, browser type, and pages visited (via cookies)
Communication records - records of our conversations and correspondence with you

4. How We Use Your Personal Data

We use your personal data for the following purposes:

4.1 Service Provision (Legal Basis: Contract Performance)

Processing and managing your appointment bookings
Providing nail salon services
Sending appointment confirmations and reminders
Handling enquiries and customer service

4.2 Marketing (Legal Basis: Consent)

Sending newsletters about our services, offers, and updates
Marketing communications via email, SMS, or social media (where you have consented)

4.3 Business Operations (Legal Basis: Legitimate Interests)

Maintaining accurate business records
Improving our services and customer experience
Ensuring the security of our premises and services

5. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on:

Contract: When necessary to provide our salon services to you
Consent: For marketing communications and newsletters (you can withdraw this at any time)
Legitimate Interests: For business administration and improving our services

6. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

Service providers - such as appointment booking systems or email marketing platforms (under strict data processing agreements)
Legal requirements - where required by law or to protect our rights
Emergency situations - where necessary to protect health and safety

All third-party processors are carefully selected and required to maintain appropriate security standards.

7. Data Retention

We retain your personal data for the following periods:

Active customers: For the duration of our business relationship plus 2 years
Inactive customers: 3 years from last appointment
Newsletter subscribers: Until you unsubscribe
Website cookies: As specified in our Cookie Policy

After these periods, data is securely deleted unless we have a legal obligation to retain it longer.

8. Your Rights

Under UK GDPR, you have the following rights:

8.1 Right of Access

You can request a copy of the personal data we hold about you.

8.2 Right to Rectification

You can ask us to correct inaccurate or incomplete personal data.

8.3 Right to Erasure

You can request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

You can ask us to limit how we use your personal data.

8.5 Right to Data Portability

You can request your personal data in a portable format.

8.6 Right to Object

You can object to processing based on legitimate interests or for marketing purposes.

8.7 Right to Withdraw Consent

You can withdraw consent for marketing communications at any time.

To exercise any of these rights, please contact us using the details in Section 2.

9. Marketing Communications

9.1 Consent

We will only send marketing communications where you have given explicit consent.

9.2 Unsubscribing

You can unsubscribe from marketing communications at any time by:

Clicking the unsubscribe link in emails
Replying 'STOP' to SMS messages
Contacting us directly

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Secure storage systems with access controls
Regular security assessments
Staff training on data protection
Encryption of sensitive data where appropriate

However, no system is completely secure, and we cannot guarantee absolute security.

11. Cookies

Our website uses cookies to improve your browsing experience. For detailed information about our use of cookies, please see our separate Cookie Policy.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be notified through our website or direct communication. The "Last Updated" date at the top indicates when the policy was last revised.

14. Complaints

If you have concerns about how we handle your personal data, please contact us directly using the details in Section 2. We are committed to resolving any data protection concerns promptly and fairly.

15. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental consent.

This Privacy Policy was last updated on 07/09/2025 and is effective immediately.

For any questions about this Privacy Policy or our data practices, please contact us at the details provided in Section 2.