Privacy Policy

---

Privacy Policy

Naked Beauty Ltd is the data controller and processes your personal information in accordance with this Privacy Policy and applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Phorest Salon Software acts as a data processor on behalf of Naked Beauty Ltd. Phorest only accesses personal data where necessary for customer support, system maintenance, or troubleshooting, and must process all personal data in line with this Privacy Policy and applicable data protection legislation.

If you have any questions or concerns about how your personal data is handled, please contact us using the details provided at the end of this notice.

⸻

What Personal Information Do We Collect?

The personal data we may collect includes:

• Name

• Email address

• Date of birth

• Phone number

• Health and medical information (special category data)

⸻

How Is Your Information Collected?

Your information may be collected when you provide it to us via:

• Phorest Salon Software

• Our website

• Telephone

• In-salon consultations

• Email or social media

• Consultation and consent forms

All client information is securely stored using Phorest Salon Software.

Naked Beauty Ltd provides you with access to your account and booking information through Phorest for the limited purpose of viewing and updating your details.

⸻

Why Do We Need Your Information?

We collect and process your personal data to:

• Provide products, services, and treatments

• Fulfil our legal, contractual, and insurance obligations

• Ensure treatments are carried out safely and appropriately

We only collect personal data that is necessary and do not retain it for longer than required.

⸻

Special Category Data (Health Information)

Where we request health or medical information, this will be clearly explained, including the reason for collection and how it will be used.

• Explicit consent is required before processing health data

• Consent is obtained via signed consultation or consent forms

• Health data is used solely to assess treatment suitability and client safety

You may withdraw your consent at any time, subject to legal, insurance, or contractual requirements.

⸻

Why Do We Process Your Data?

Your personal data is processed to:

• Enter into and fulfil contracts for products and services

• Communicate appointment confirmations, reminders, cancellations, or changes

• Assess treatment suitability and manage contraindications

• Ensure client safety and provide industry-standard care

• Send marketing communications (only with consent)

• Maintain accurate client records

• Meet legal, regulatory, tax, and insurance requirements

⸻

Marketing Communications

Naked Beauty Ltd will only send marketing communications where you have provided explicit consent.

You can withdraw your consent at any time by:

• Using the unsubscribe link in communications, or

• Contacting us directly

We will never sell or rent your personal data to third parties.

⸻

Your Rights as an Individual

Under UK GDPR, you have the right to:

• Be informed about how your data is used

• Access your personal data

• Rectify inaccurate or incomplete data

• Request erasure where there is no lawful reason to retain it

• Restrict processing

• Data portability (receive your data in a readable format)

• Object to direct marketing

• Withdraw consent at any time

To exercise your rights, please contact us using the details below.

⸻

Children’s Privacy

Naked Beauty Ltd does not knowingly collect personal data from children under the age of 13 without parental or guardian consent.

If we become aware that such data has been collected without consent, it will be deleted promptly unless consent can be obtained.

⸻

Data Sharing

Your personal data is only shared:

• With Phorest Salon Software where necessary for system support

• Where required by law or regulatory authorities

We do not share personal data with third parties without your consent, except where legally required.

⸻

Use of Data Processors

Where third-party data processors are used, strict contractual agreements are in place to ensure:

• Data is processed only under our instructions

• Appropriate security measures are maintained

• Data is not shared or disclosed unlawfully

⸻

Phorest Salon Software

Naked Beauty Ltd uses Phorest Salon Software for:

• Appointment scheduling

• Client records (CRM)

• Marketing communications

⸻

How Long Do We Keep Your Data?

We retain personal data only for as long as necessary:

• Client records: minimum 7 years (tax/legal requirements)

• Health and safety records: 10 years

• Marketing data: until consent is withdrawn

⸻

International Data Transfers

Personal data processed via Phorest is stored within the UK and/or EEA.

Appropriate safeguards, including encryption in transit and at rest, are in place to protect your data.

⸻

What Happens If You Don’t Provide Your Information?

Certain personal data is required to enter into a contract for services.

If this information is not provided, we may be unable to offer certain treatments or products.

⸻

Safeguarding Your Personal Data

We take appropriate technical and organisational measures to protect your data, including:

• Secure encrypted systems

• Restricted staff access

• Secure HTTPS and TLS protocols

Only authorised personnel can access relevant data necessary for their role.