Last Updated: July 2026
Debbie Pickles (trading as Beauty Works Horsham) is committed to protecting the privacy and security of your personal data. This policy describes how I collect and use your personal information when you visit our website, book an appointment, or receive beauty treatments.
1. Who We Are
| Detail | Information |
| Website: | www.beautyworkshorsham.co.uk |
| Business Name: | Beauty Works Horsham |
| Status: | Sole Trader / Freelance |
| Data Protection Contact: | Debbie Pickles |
| Email Address: | debbie@beautyworkshorsham.co.uk |
For the purposes of the UK General Data Protection Regulation (UK GDPR), Debbie is the data controller responsible for your personal data.
2. The Data We Collect About You
To provide beauty treatments safely and effectively, we may collect and process the following information:
- Identity & Contact Data: Name, date of birth, address, email, and phone number.
- Health & Medical Data (Special Category Data): Skin types, allergies, patches tests, medical conditions, current medications, or pregnancy status. This information is required to ensure treatments are safe for you to undergo.
- Technical Data: Your IP address, browser type, and usage patterns when you visit our website.
- Marketing & Communications Data: Your preferences for receiving news about our special offers or new treatments.
3. Lawful Basis for Processing
We process your data under the following legal frameworks:
- Contractual Necessity: To manage your bookings and deliver the beauty treatments you have requested.
- Consent: For sending you marketing materials, or when you complete patch tests and health consultation forms.
- Health & Social Care (Special Category): For health-related data (such as allergies or medical history), processing is managed under explicit consent or to ensure safe health and social care practices under a duty of confidentiality.
- Legitimate Interests: To effectively run, improve, and protect our business.
4. How We Use Your Data
We use your information specifically to:
- Conduct pre-treatment consultations and patch tests to guarantee client safety.
- Manage, confirm, and remind you of your appointments.
- Process secure payments for your treatments.
- Keep a historical record of the treatments you have received.
5. Sharing Your Data
Your privacy is highly respected. We do not sell your personal data. We only share information with:
- Service Providers: GDPR-compliant third parties who provide our booking software, website hosting, or email communication tools.
- Professional Advisers/Insurers: If strictly necessary for insurance or legal requirements.
6. Data Security & Retention
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.
- Retention Period: We keep your information for as long as necessary to fulfill the purposes we collected it for. For insurance, professional liability, and tax purposes, client files and treatment records are typically kept for 6 to 7 years following your last treatment.
7. Your Legal Rights
Under UK data protection laws, you have the right to:
- Request access to your personal data and treatment records.
- Request correction of any inaccurate or incomplete data.
- Request erasure of your personal data (where it does not conflict with our legal or insurance requirements to retain records).
- Withdraw consent at any time where we rely on consent to process your data.
To exercise any of these rights, please contact Debbie at debbie@beautyworkshorsham.co.uk.
8. How to raise a data protection concern or complaint
If you have any questions, concerns, or wish to make a formal complaint about how we handle your personal data, you have the right to raise this directly with us.
How to contact us:
Please email me at debbie@beautyworkshorsham.co.uk.
Our process: We will formally acknowledge your complaint within 30 days of receipt and work to investigate and resolve your concern without undue delay.
Escalating to the Information Commissioner’s Office (ICO)
If you remain dissatisfied with our final response, or if we fail to respond to you within the statutory timeframe, you retain the right to lodge a complaint with the UK data protection regulator:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk
