Privacy Policy

Last updated: 29/4/2026

Tulips Beauty & Aesthetics (“we”, “us”, “our”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services, visit our premises, or interact with us.

---

1. Who We Are

Tulips Beauty & Aesthetics is the data controller responsible for your personal data.

 2. What Personal Data We Collect

We may collect and process the following types of personal data:

a) Identity & Contact Data

* Full name

* Email address

* Phone number

* Address

b) Health & Treatment Data (Special Category Data)

* Medical history relevant to treatments

* Allergies and skin conditions

* Treatment records and history

* Before and after photographs (with consent)

c) Appointment & Transaction Data

* Booking details

* Payment records (we do not store full card details)

* Service history

d) Technical Data

* IP address

* Browser type (if using our website)

* Cookies and usage data

 3. How We Collect Your Data

We collect data through:

* Booking forms (online or in-person)

* Consultation forms

* Website interactions

* Social media or direct communications

* Phone or email correspondence

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

* Consent – for marketing communications and health-related data

* Contract – to provide booked treatments and services

* Legal Obligation – for tax, insurance, and regulatory requirements

* Legitimate Interests– for business improvement and customer service

5. How We Use Your Data

We use your data to:

* Provide safe and appropriate treatments

* Manage bookings and appointments

* Communicate with you about your services

* Maintain accurate records

* Process payments

* Send marketing communications (only with your consent)

* Comply with legal and regulatory obligations

6. Special Category Data

Due to the nature of aesthetic treatments, we collect health-related data. This is processed only:

* With your explicit consent

* For the purpose of ensuring safe treatment

* In compliance with professional and legal obligations

7. Sharing Your Data

We do not sell your personal data. We may share it with:

* Payment processors

* IT and booking system providers

* Insurance providers (if required)

* Legal or regulatory authorities when required

All third parties are required to respect your data and comply with GDPR.

8. Data Retention

We retain your personal data only as long as necessary:

* Client records: typically up to 6–7 years (for legal and insurance purposes)

* Marketing data: until you withdraw consent

* Financial records: as required by HMRC regulations

9. Your Rights Under GDPR

You have the following rights:

* Right to access your data

* Right to correct inaccurate data

* Right to request deletion (“right to be forgotten”)

* Right to restrict processing

* Right to data portability

* Right to object to processing

* Right to withdraw consent at any time

To exercise your rights, contact us using our Email.

10. Data Security

We implement appropriate security measures to protect your data, including:

* Secure storage systems

* Password-protected digital files

* Restricted access to sensitive data

* Confidential handling of client records

11. Cookies (If Applicable)

Our website may use cookies to improve user experience. You can control cookie settings through your browser.

12. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on our website or made available upon request.

14. Consent

By using our services, you acknowledge that you have read and understood this Privacy Policy.

**Tulips Beauty & Aesthetics**

Committed to protecting your privacy and delivering safe, professional care.