1. WHO WE ARE

Hannah Rose Advanced Facialist is the Data Controller responsible for your personal data.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​​​

2. WHAT INFORMATION WE COLLECT

We may collect and process the following:

Personal Information

• Name

• Contact details (email, phone, address)

• Appointment history

• Purchase history

Special Category Data (Health Information)

• Medical history

• Medication information

• Skin conditions

• Treatment records

• AI skin scan data and images

Health data is processed only with your explicit consent and for the purpose of providing safe aesthetic treatment.

Payment Information

Payment details are processed securely by third-party providers such as Wix and Fresha. We do not store full card details.

​​​

3. HOW WE USE YOUR INFORMATION

We use your information to:

• Provide treatments and consultations safely

• Create personalised skincare plans

• Send appointment confirmations and reminders

• Respond to enquiries

• Process payments and orders

• Comply with legal and insurance obligations

• Send marketing communications (with your consent)

Health data is processed under Article 9(2)(h) UK GDPR (healthcare provision).

​

4. MARKETING & CONSENT

You will only receive marketing emails if you have opted in.

You can withdraw consent at any time by:

• Clicking “unsubscribe” in emails

• Contacting us directly

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

​

5. DATA RETENTION

We retain treatment records and health information for a minimum of 7 years in line with insurance and professional guidance.

After this period, data is securely deleted or anonymised.

​

6. SHARING YOUR DATA

We may share data with trusted third parties only where necessary, including:

• Booking software providers

• Payment processors

• Insurance providers

• Legal or regulatory authorities (if required)

All third parties are required to process your data securely and lawfully.

​

Data from Minors: we do not knowingly collect data from or market to children under 18 years of age. We strongly recommend a parent discussing with Hannah Rose if Data is required to be keep for a child. If we find we have been submitted personal information from Minors (under 18s) we will deactivate and take responsible measures to removed such data from our records. 

​

OUTSIDE THE UNITED KINGDOM

We understand the rights may differ in other countries and you may be entitled to your personal information at different levels. We work under UK law as only provide services to UK addresses and residents. If we find we have been submitted personal date from a Non-UK resident we will deactivate and take responsible measures to removed such data from our records. 

​

7. YOUR RIGHTS

Under UK GDPR you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion (where legally permissible)

• Restrict processing

• Object to marketing

• Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: https://ico.org.uk

​

8 - EXTERNAL LINKS

When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

​

​

9. UPDATES TO PRIVACY NOTICE

We may update this privacy notice from time to time to keep inline with UK Law and Guidances. The updated version will only appear on this site and the date will be stipulated under the title of this page. We encourage you to read privacy notices from time to time to ensure you are informed of how we are protecting your information. 

​

10. CONTACT

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Hannah Rose Advanced Facialist
Email: hannahroseadvancedfacialist@gmail.com

​

​