Privacy Notice
This notice explains how Glam Waxing collects, uses and protects your personal information, and the rights you have over it. Please read it alongside the consent form you complete before treatment.
Who we are
Glam Waxing Ltd is the data controller responsible for your personal information.
If you have any question about this notice or your data, please contact us using the details above and your request will be handled by the company director.
The information we collect
Depending on how you interact with us, we may collect:
- Your details: name, email address, phone number and date of birth.
- Booking details: the treatments you book, appointment dates and times, and your booking history.
- Health and treatment information (special category data): the answers you give on our consent form, including waxing and treatment history, reactions, allergies, medications, skin products and recent treatments, sun exposure, pregnancy, and relevant medical or skin conditions. This is sensitive information and we only collect it to keep your treatment safe. We rely on your explicit consent, which you give when you complete and sign the form.
- Parental or guardian details: where a client is under 18, the name and contact details of the parent or guardian who provides consent.
- Payment information: for online bookings, your card payment is processed securely by Stripe; for payments in the salon, it is handled by the card terminal provider. In both cases your full card details are held by the payment provider, not by us. We can see transaction records, such as the amount, date and the last few digits of the card, for our own accounting.
- Website information: when you use glamwaxing.co.uk we may collect your IP address, device and browser information, and how you use the site, through cookies and similar technologies (see Cookies below).
- Marketing information: if you sign up to our newsletter, your name and email address.
- Messages you send us: the content of emails, contact form submissions, phone calls and, occasionally, messages from clients who hold a personal mobile number and contact us by WhatsApp.
- CCTV images: we operate CCTV inside the salon for the safety and security of clients and staff.
- Reviews: if you choose to leave a review, the content you post on the relevant review platform.
How we use your information, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Manage your bookings and provide your treatments | To deliver the service you have booked | Performance of a contract |
| Keep your treatment safe using your health information | To assess suitability and reduce the risk of a reaction | Explicit consent (special category data) |
| Send appointment confirmations and reminders by email and SMS | To reduce missed appointments and keep you informed | Performance of a contract and our legitimate interest in running the salon |
| Take and record payments, and keep financial records | To complete your purchase and meet tax and accounting rules | Performance of a contract and legal obligation |
| Send you our newsletter | To share offers and updates you have asked for | Consent |
| Understand and improve how the website performs, and measure our advertising | To run and improve the site and our marketing | Consent (through the cookie banner) |
| Operate CCTV in the salon | To protect the safety and security of clients, staff and property | Legitimate interests |
| Handle enquiries, complaints, insurance matters and legal claims | To respond to you and protect our position | Legitimate interests and legal obligation |
You can withdraw consent at any time (for example, unsubscribe from the newsletter or change your cookie choices). Withdrawing consent does not affect anything we did before you withdrew it. If you ask us not to process your health information, we may be unable to carry out your treatment safely.
Cookies and website analytics
Our website uses cookies and similar technologies, grouped as:
- Strictly necessary: needed for the site and booking to work (Squarespace).
- Performance and analytics: help us understand how the site is used (Squarespace Analytics and Google Analytics).
- Marketing: used to measure and target our advertising on Google and on Facebook and Instagram (Google Ads and the Meta pixel).
- Security: Google reCAPTCHA helps protect our forms from spam and abuse.
When you first visit, our cookie banner lets you accept or decline the non-essential categories, and you can change your choice at any time through the cookie settings on the site.
Who we share your information with
We do not sell your personal information. We share it only with trusted providers who help us run the business, and only as far as they need it. Each provider has its own privacy policy:
- Squarespace hosts our website and processes our booking, contact and newsletter forms and our online store. Privacy policy
- Squarespace Scheduling (Acuity) manages bookings and sends your appointment confirmations and reminders. Privacy policy
- Google provides our website analytics and tag management, reCAPTCHA, Google Ads, and the Google Workspace storage where our signed consent records are securely held. Privacy policy
- Make automates the secure transfer of your completed consent form into our records. Privacy policy
- Meta Platforms provides the advertising tools we use on Facebook and Instagram. Privacy policy
- Stripe processes online card payments. Privacy policy
- HostPapa provides our business email. Privacy policy
- Verisure monitors our in-salon CCTV and alarm system and stores any footage from security events. Privacy notice
- Arlo makes the cameras used in our CCTV system and has its own privacy notice. Privacy notice
We may also share information where the law requires it, for example with our insurer, professional advisers, or the authorities in connection with a legal claim or investigation.
Sending information outside the UK
Some of our providers are based outside the UK, or store data outside the UK. Where that happens, we make sure your information is protected by an approved safeguard, such as the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses. Our consent form automation (Make) stores data within the EU, and our consent records are held in Google Workspace.
How long we keep your information
- Health and consent records: for up to 5 years after your last treatment, then securely deleted. We ask you to confirm your consent again every 12 months.
- Booking and contact details: for as long as you are a client and for up to 5 years after your last appointment.
- Payment and financial records: for 6 years, to meet tax and accounting rules.
- Newsletter: until you unsubscribe.
- CCTV images: for a limited period in connection with security and safety, after which they are deleted.
- Website analytics: in line with the retention settings of the analytics provider.
Your rights
Under data protection law you have the right to:
- ask for a copy of the information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information, where there is no overriding reason to keep it
- ask us to restrict or object to how we use your information
- ask us to transfer your information to another provider
- withdraw your consent at any time
To exercise any of these, email info@glamwaxing.co.uk. We will respond within one month. There is normally no charge.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO):
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed. Please check back occasionally to stay informed.
Glam Waxing Ltd · 88 Wandsworth Bridge Road, London, SW6 2TF