Privacy Notice
The Waxing Room is committed to protecting your data and respecting your privacy. This Privacy Notice explains how your information is collected, used and stored in line with UK GDPR.
Who we are:
The Waxing Room
thewaxingroom2024@gmail.com
The Waxing Room is registered with the Information Commissioner's Office (ICO) and is the Data Controller for the personal information we process.
What data we collect:
We may collect the following information:
Name
Email address
Telephone Number
GP details
Appointment information
Treatment history
Medical information, contraindications, allergy information relevant to waxing, massage, aromatherapy and reiki treatments.
This information is collected via our website, Fresha booking system, Google Forms consultation form and/or paper consultation form.
Why we collect data:
Your data is collected in order to:
Manage booking and appointments
Provide treatments safely and professionally
Assess treatment suitability
Maintain accurate records
Meet legal, insurance and professional obligations.
Lawful Basis for Processing
Under UK GDPR, we process your data based on:
Contract: to provide booked treatments.
Legal Obligation: to retain appropriate records.
Explicit Consent: for processing health and medical information.
You may withdraw consent at any time, however this may affect our ability to provide treatments safely.
How your data is stored:
Your data is stored securely used password-protected devices, third-party systems and locked paper storage. Access to your data is restricted to The Waxing Room only.
We do not sell or use client data for marketing purposes.
How long do we keep your data?
Treatments and consultation records are retained for 7 years following your last appointment, in line with industry best practice and insurance requirements. After period, data is securely deleted.
Sharing your data:
Your data may only be shared with:
Fresha
Insurers or legal authorities where legally required
Your data is never shared for marking purposes.
Your rights:
You have the right to
Request access to your personal data
Request corrections to inaccurate information
Lodge a complaint with the ICO (www.ico.org.uk)
To exercise your rights, please contact us using the above email.
This Privacy Notice may be updated from time to time. The most current version will always on our website.
-