La Beauté Boutique Last updated: June 2026
**1. Introduction
La Beauté Boutique is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information in accordance with UK GDPR and the Data Protection Act 2018.
2. Data Controller
La Beauté Boutique 62A Lon‑y‑Celyn, Whitchurch, Cardiff, CF14 7BW, United Kingdom For all data enquiries, please contact the salon owner.
3. Information We Collect
3.1 Contact Information
-
Name
-
Phone number
-
Email address
-
Postal address (if provided)
3.2 Treatment & Consultation Information
-
Medical history relevant to treatments
-
Allergies, contraindications, pregnancy status
-
Patch test results
-
Treatment notes
-
Client preferences
-
Before/after photographs (with consent)
3.3 Booking & Payment Information
-
Appointment history
-
Payment details (processed securely by third‑party providers)
-
We do not store card information
3.4 CCTV Footage
-
Recorded only in common areas
-
Stored for a maximum of 30 days
3.5 Marketing Preferences
-
Email/SMS marketing consent (opt‑in only)
4. How We Use Your Information
4.1 To Provide Treatments and Services
Lawful basis: Contract
-
Managing bookings
-
Delivering treatments safely
-
Maintaining accurate treatment records
4.2 To Protect Your Health
Lawful basis: Explicit Consent
-
Assessing suitability for treatments
-
Ensuring safe practice
4.3 For Safety and Security
Lawful basis: Legitimate Interest
-
CCTV monitoring in common areas
-
Safeguarding staff and clients
4.4 For Legal and Insurance Requirements
Lawful basis: Legal Obligation
-
Maintaining treatment and patch test records
4.5 For Marketing (Optional)
Lawful basis: Consent
-
Sending updates, offers, and salon news
-
You may withdraw consent at any time
5. CCTV Use
-
CCTV operates only in common areas
-
No cameras are installed in treatment rooms, bathrooms, or private spaces
-
Footage is stored securely for up to 30 days
-
Clients may request temporary deactivation during treatment if they feel safe
-
Clients may request copies of footage that includes them
6. Data Retention
We keep your information only as long as necessary:
-
Consultation forms: 6 years
-
Patch test records: 6 years
-
Treatment notes: 6 years
-
Marketing consent: until withdrawn
-
Photographs: until consent withdrawn
-
CCTV footage: 30 days
-
Booking records: 1–3 years
7. How We Protect Your Data
We use appropriate technical and organisational measures, including:
-
Secure digital storage
-
Password‑protected systems
-
Restricted staff access
-
Encrypted booking and payment platforms
-
Locked storage for paper records
8. Sharing Your Information
We do not sell or share your data for marketing.
We may share data only with:
-
Insurance providers (if required for a claim)
-
Legal authorities (where required by law)
-
Booking or payment platforms used to deliver services
All third‑party processors comply with UK GDPR.
9. Your Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Request correction of inaccurate information
-
Request deletion (where legally permitted)
-
Withdraw consent at any time
-
Request a copy of CCTV footage involving you
-
Object to certain types of processing
-
Request restriction of processing
To exercise your rights, please contact the salon owner.
10. Marketing Communications
We will only send marketing messages if you have explicitly opted in. You may opt out at any time.
11. Updates to This Policy
We may update this Privacy Policy periodically. The most recent version will always be available on our website and in the salon.
