Bella Estetica Privacy Policy
Our contact details:
Name: Bella Estetica
Address: 5 St George’s St, Cheltenham GL50 4AF
Website: https://bellaestetica.co.uk
Email: support@bellaestetica.co.uk
Privacy Policy reviewed on: 14th March 2022
The type of personal information we collect
We currently collect and process the following information:
Personal identifiers, contacts and characteristics (for example, name and contact details including phone number, post code and email address)
We also process, but not store your payment information (other than last 4 digits of your long card number for verification purposes in case a refund is needed)
We also have google analytics running on our back end providing us statistics on generic user interaction with he website.
You agree for us to securely store and use this information to perform our business functions like collect payments, book appointments and contacting you if needed.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
• Booking your appointment with us via the automated booking system
• Using the ‘contact us’ form
• Some of our treatments will require you to complete a pre-treatment form to make the treatment as safe as possible.
We use the information that you have given us in order to process payments and contact you in case your booking needs cancellation or for any other reason where we need to reach out to you.
We may share this information with Stripe payment system or Google Analytics to provide you with the payment services and us with the generic website use data.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(c) We have a legal obligation.
(e) We need it to perform a public task.
How we store your personal information
Your information is securely stored in an encrypted database.
All of your personal information will be systematically deleted on quarterly basis if you do not have any upcoming appointments with us.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [insert email address, phone number and or postal address] if you wish to make a request.
Tell people about their data protection rights. Their rights will differ depending on your lawful basis for processing, so once you know this then you can select the relevant sections from the text in the template below to include in your Privacy Notice. The lawful basis page of our Guide to the GDPR has a useful table that shows the varying rights that apply depending on the lawful basis.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at support@bellaestetica.co.uk.
You can also complain to the ICO if you are unhappy with how we have used your data.