Effective Date:  24^th June 2026
Business Name: Georginas Beauty and Wellbeing
Location: Pantysgyfarnog, Llangynog, Carmarthen, SA33 5DE

1. Introduction
Georginas Beauty and Wellbeing is committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website, contact us, or use our services.

2. Data Controller
Georginas Beauty and Wellbeing is the data controller responsible for your personal data.
Contact Details:
Address: Pantysgyfarnog, Llangynog, Carmarthen, SA33 5DE
Email georginaclaire666@gmail.com
Phone:  07788800210

3. Information We Collect
We may collect and process the following personal data:
Identity Data: Name
Contact Data: Email address, telephone number
Booking Data: Appointment details, treatment history, and preferences
Payment Data: Transaction details (processed securely via third parties; we do not store card details)
Technical Data: IP address, browser type, website usage data
Health Data (where required): Allergies, medical conditions, medications, and skin sensitivities

4. Lawful Basis for Processing
Under UK GDPR, we rely on the following lawful bases to process your data:
Contractual Necessity – to manage appointments and provide services
Consent – for marketing and sensitive (health-related) data
Legitimate Interests – to operate and improve our business
Legal Obligation – to meet legal, tax, and insurance requirements

5. How We Use Your Data
We use your information to:
Manage your bookings and appointments
Deliver treatments safely and effectively
Communicate with you about your appointments
Maintain accurate client records
Process payments
Improve our website and services
Send marketing communications (only where you have opted in)

6. Special Category Data (Health Information)
Some treatments require us to collect health-related information, which is classified as special category data under UK GDPR.
This data is:
Collected only when necessary
Processed with your explicit consent
Used solely to ensure safe and appropriate treatment
Stored securely and confidentially

7. Patch Tests and Treatment Consent
Certain treatments offered at Georginas Beauty and Wellbeing require a patch test and/or consultation form prior to treatment.
As part of this process, we may collect:
Medical and health-related information
Allergy and skin sensitivity details
Treatment history and previous reactions
Signed consent confirming your understanding of risks and aftercare
This data is:
Processed with your explicit consent
Used only to ensure your safety and suitability for treatment
Stored securely and handled in strict confidence
Retained in line with legal, professional, and insurance requirements
By proceeding with treatment, you confirm that:
The information you provide is accurate and complete
You understand the treatment, risks, and aftercare advice
You consent to the use of your personal and health data for treatment purposes
You may withdraw consent at any time; however, this may limit our ability to safely perform certain treatments.

8. Sharing Your Information
We do not sell or rent your personal data. We may share your information with:
Appointment booking systems
Payment processors
IT and website service providers
Professional advisors or insurers
Legal or regulatory authorities where required
All third parties are required to handle your data securely and in compliance with data protection laws.

9. Data Retention
We retain your data only as long as necessary:
Client records: Up to 6 years (insurance/legal purposes)
Financial records: As required by UK law
Marketing data: Until you withdraw consent

10. Data Security
We take appropriate security measures to protect your personal data, including:
Secure digital systems
Restricted access to client information
Safe storage of consultation forms

11. Your Rights (UK GDPR)
You have the right to:
Access your personal data
Correct inaccurate or incomplete data
Request deletion of your data
Restrict or object to processing
Withdraw consent at any time
Request data portability
To exercise your rights, please contact us.
You also have the right to complain to the Information Commissioner’s Office (ICO):
🌐 https://www.ico.org.uk

12. Cookies
Our website uses cookies to:
Improve functionality and user experience
Analyse website traffic
Remember preferences
You can control or disable cookies through your browser settings.

13. Marketing Communications
We will only send marketing emails or promotions if you have opted in.
You can unsubscribe at any time by:
Clicking the unsubscribe link in marketing emails
Contacting us directly

14. Third-Party Links
Our website may include links to third-party websites. We are not responsible for their privacy practices.

15. Changes to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with a revised effective date.