Privacy & Data Protection
UK GDPR, DPA 2018 & PECR Compliance Framework
is committed to the highest standards of data privacy. This policy details our rigorous protocols for collecting, processing, and storing personal data across all bookings, clinical consultations, and digital interactions. We ensure that our practices as an exclusive beauty salon in the UK adhere strictly to the lawful bases of processing, safeguarding the interests of our discerning clientele.
Data Collection & Categories
Transparent inventory of processed information
| Category | Specific Data Points | Primary Purpose | Lawful Basis |
|---|---|---|---|
| Identity | Full name, title, date of birth, gender. | Client identification & verification. | Contractual Necessity |
| Contact | Email address, telephone number, billing address. | Booking confirmations & service updates. | Contractual Necessity |
| Health Records | Skin analysis, allergies, medical history, contraindications. | Ensuring safety for premium skincare treatments London. | Legal Obligation / Vital Interests |
| Financial | Payment card details (tokenized), transaction history. | Secure payment processing for luxury services. | Contractual Necessity |
| Technical | IP address, browser type, device identifiers. | Website optimization & security monitoring. | Legitimate Interests |
| Marketing | Communication preferences, newsletter engagement. | Personalized offers for our exclusive beauty salon in the UK. | Explicit Consent |
Lawful Bases, Retention & Storage
Lawful Bases for Processing
We process data under four primary UK GDPR bases: Contractual Necessity (to deliver your treatments), Legal Obligation (for tax and medical insurance), Legitimate Interests (to improve our atelier services), and Explicit Consent (for marketing communications regarding premium skincare treatments London).
Retention Schedules
Booking records and financial data are retained for 7 years to comply with UK tax law. Clinical consultation records are kept for 10 years following your last treatment at our exclusive beauty salon in the UK to ensure continuity of care and insurance compliance. Marketing data is retained until consent is withdrawn.
Secure Storage & Encryption
All digital records are stored within encrypted, UK-based cloud servers with multi-factor authentication. Physical records, if any, are secured in locked, fire-proof cabinets within our Covent Garden sanctuary. We conduct quarterly retention reviews to securely erase data that no longer meets processing requirements.
Client Rights & How to Exercise Them
Your empowerment under UK data protection law
Core Data Subject Rights
Under UK GDPR, you possess the right to: Access your data (Subject Access Request), Rectify inaccuracies, Erase data (Right to be Forgotten), Restrict processing, Port data to another provider, and Object to automated decision-making or marketing regarding premium skincare treatments London.
Submission & Verification Process
To exercise these rights at our exclusive beauty salon in the UK, please email info@paleaurorastudio.com. To protect your privacy, we require identity verification (such as a photographic ID) before processing any request. We aim to respond within 30 days, as per statutory timelines.
Escalation to the ICO
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues (www.ico.org.uk).
Contact & Data Protection
For all privacy-related enquiries, Subject Access Requests, or to discuss our data protocols at , please use the official corporate channels below.
ICO Registration: ZB549210 (Pending)
You may escalate concerns to the Information Commissioner's Office if our internal resolution is not satisfactory.