Belleza Beauty Privacy Policy & GDPR Compliance Statement
Effective Date: [08/08/2025]
Belleza Beauty is committed to protecting your privacy and complying with the UK Data Protection Act 2018, the General Data Protection Regulation (GDPR), and other applicable laws. This policy explains how we collect, use, store, and protect your personal information—whether you visit our salons, use our website, or use the Belleza Beauty Client App for Android or iOS.
Our online booking and appointment management services are powered by AppointGem.com (“AppointGem”), which securely stores your booking and treatment records as our Data Processor.
1. Who We Are
Belleza Beauty operates beauty salons providing a range of treatments and retail products. Our services can be booked in person or online through our website and AppointGem.
Data Controller: Belleza Beauty
Booking Software Provider: AppointGem (https://appointgem.com) acts as a Data Processor on our behalf.
Contact Email for Privacy Matters: [info@bellezabeauty.pro]
2. Data We Collect
We may collect the following categories of personal data:
A. In-Salon & Booking Data
Name, address, email, and phone number
Date of birth (where required for treatments)
Appointment history and preferences
Consultation forms and treatment notes
Payment details (processed securely, not stored by us)
B. Online & Website Data
IP address and device details
Browser type and settings
Pages visited and actions taken on our website
Cookies and tracking technologies (see Section 10)
C. Special Category Data
Medical information relevant to treatments (e.g., allergies, pregnancy, skin conditions)
We will always obtain explicit consent before processing any special category data.
D. Mobile App Data (Belleza Beauty Client App – Android & iOS)
When you download and use the Belleza Beauty Client App from the Google Play Store or Apple App Store, we may collect:
- Device ID and operating system type
- Location data (if you enable location services for nearby salon search)
- App usage analytics (pages viewed, features used)
- Login credentials (if you create an account)
- Push notification preferences
The Belleza Beauty Client App uses AppointGem’s secure servers to store and process appointment and consultation data.
E. App Permissions (Belleza Beauty Client App)
Depending on your settings, our mobile app may request access to:
- Location – for finding nearby salons
- Camera – for uploading profile or consultation images (if applicable)
- Push Notifications – for appointment reminders and promotions
All permissions are optional and can be managed in your device settings.
3. How We Collect Your Data
We collect data in the following ways:
Directly from you when you book an appointment, fill out a consultation form, or contact us.
Through our booking system AppointGem, which securely stores your appointment and consultation details.
Automatically when you use our website (via cookies and analytics).
4. Legal Basis for Processing
Under GDPR, we process your personal data based on:
Contractual necessity – to provide treatments and manage appointments.
Consent – where you agree to receive marketing or where special category data is processed.
Legal obligations – e.g., maintaining tax records.
Legitimate interests – improving our services and ensuring client safety.
5. How We Use Your Data
We use your personal data to:
Manage your appointments and treatment records.
Provide personalised beauty advice and aftercare.
Send appointment confirmations, reminders, and follow-up messages.
Process payments.
Administer loyalty and reward schemes.
Improve our website and services.
6. Payment Processing
We accept most credit cards, debit cards, and cash payments. All prices include VAT at the current rate. Payment details are processed securely via PCI DSS-compliant payment providers.
7. Refunds
We do not offer refunds for completed services. However, if you are dissatisfied with your experience, please contact us and we will aim to resolve the matter promptly.
8. Zero Tolerance Policy
Belleza Beauty operates a zero-tolerance policy towards abuse, harassment, or discrimination. Our staff have the right to refuse or stop treatments if a client’s behaviour is inappropriate.
9. Data Sharing
Your data may be shared with:
AppointGem.com – for secure booking and treatment record storage.
Payment providers – for processing transactions.
Regulatory bodies – if legally required.
We do not sell or rent your data to third parties.
10. Cookies & Tracking
We use cookies for:
Analytics – anonymously monitoring website traffic and usage patterns.
Functionality – remembering preferences and login details.
Security – protecting against fraudulent activity.
You can disable cookies via your browser settings.
11. Data Security
We protect your data through:
Secure online storage (AppointGem’s encrypted servers).
Restricted staff access on a need-to-know basis.
Regular system updates and password protection.
Locked storage for paper records.
12. Data Retention
Client data is retained for 5 years from the date of your last treatment, after which it is securely deleted unless required for legal purposes.
Marketing consent can be withdrawn at any time.
13. Your GDPR Rights
You have the right to:
Access – request a copy of your personal data.
Rectification – correct inaccurate or incomplete data.
Erasure – request deletion of your data (where legally possible).
Restriction – limit how we process your data.
Data portability – request your data in a machine-readable format.
Withdraw consent – for marketing or specific data uses.
Requests can be made by contacting us at [info@bellezabeauty.pro]. We will respond within 30 days.
14. Special Treatments & Gift Voucher Policies
Waxing: Avoid heat treatments, exercise, and deodorants before/after waxing as per our hygiene guidelines.
Eyelash Extensions: Avoid rubbing, pulling, mascara, or curlers.
Tinting: Patch test required 24 hours before the appointment.
Shellac Polish/Acrylic/SNS/GelBuilder: No guarantee for polish durability after leaving the salon; check before departure.
Gift Vouchers: Valid for 12 months, non-refundable, and non-transferable.
15. Children’s Privacy
Our services are intended for adults. Clients under 16 require parental consent for treatments.
16. Data Breaches
In the event of a personal data breach, Belleza Beauty will notify the ICO and affected individuals as required by GDPR.
17. Contact Information
Belleza Beauty
Email: info@belleza-beauty.uk
18. Policy Updates
We may update this Privacy Policy from time to time. Changes will be posted on our website with the updated “Effective Date.”