Laser & Body by Jess respects your privacy and is committed to protecting your personal information. This Privacy Statement explains how we collect, use, store and share your personal data when you visit our website, contact us, book an appointment or receive a treatment from us.

1. Who We Are

Laser & Body by Jess is responsible for deciding how and why your personal information is used. For the purposes of UK data protection law, we are the data controller.

Our contact details are:

Business name: Laser & Body by Jess
Address: Aesthetics by Ricci-Jade, 54b Girlings Lane, Yarmouth Road, Thorpe St Andrew, Norwich, NR7 0HE
Email: laserandbodybyjess@gmail.com
Telephone: 07464 274155

2. Information We Collect

The personal information we collect depends on how you interact with us.

This may include:

  • Your name, telephone number, email address and postal address.
  • Appointment details, booking history, cancellations and attendance records.
  • Payment, transaction and billing information.
  • Messages, enquiries and other communications you send to us.
  • Marketing preferences and records of any consent you provide.
  • Technical information, including your IP address, browser type, device information and how you use our website.
  • Photographs provided by you or taken with your permission before, during or after treatment.
  • Consultation forms, treatment consent forms, patch-test records, treatment notes and aftercare information.
  • Relevant health information, including medical conditions, medications, allergies, pregnancy status, previous treatments and other information needed to assess whether a treatment is safe and suitable for you.

Information concerning your health is classified as special category personal data and receives additional protection under data protection law.

Please ensure that the information you provide is accurate and tell us when your details change.

3. How We Collect Your Information

We may collect personal information:

  • Directly from you when you contact us by telephone, email, social media or another communication service.
  • When you book, rearrange or cancel an appointment.
  • When you complete a consultation, consent or patch-test form.
  • During consultations, treatments and aftercare discussions.
  • When you make a payment.
  • When you subscribe to marketing communications or provide feedback.
  • Automatically when you visit our website through cookies, server logs and similar technologies.
  • Through third-party services that you choose to use, including our online booking provider.

4. How We Use Your Information

We may use your personal information to:

  • Respond to questions and treatment enquiries.
  • Arrange, confirm, amend and manage appointments.
  • Assess whether a treatment is appropriate and safe for you.
  • Provide treatments and aftercare.
  • Maintain accurate consultation, consent, patch-test and treatment records.
  • Process payments and maintain accounting records.
  • Contact you about your appointment or treatment.
  • Manage complaints, disputes, refunds and insurance matters.
  • Protect our clients, systems, website and business against fraud, misuse and security threats.
  • Meet our legal, tax, insurance and professional obligations.
  • Improve our services and website.
  • Send offers, appointment availability and other marketing communications where permitted.
  • Establish, exercise or defend legal claims.

We will only use your personal information for the purpose for which it was collected unless we reasonably determine that another use is compatible with the original purpose or we are legally permitted to use it in another way.

5. Our Lawful Bases

We must have a lawful basis before processing personal information.

Depending on the circumstances, we may rely on:

Contract

Processing may be necessary to take steps at your request before you book a treatment or to fulfil our agreement with you after you make a booking.

This includes managing appointments, providing treatments, taking payments and communicating with you about your booking.

Legal Obligation

We may process information where necessary to meet legal, accounting, tax, insurance, safeguarding or regulatory obligations.

Legitimate Interests

We may process information where it is reasonably necessary for our legitimate business interests, provided that your rights and interests do not override those interests.

These interests may include operating and improving our business, answering enquiries, maintaining records, preventing fraud, securing our website and handling legal claims.

Consent

We may rely on your consent for certain activities, including selected marketing communications, treatment photographs and non-essential cookies.

You may withdraw your consent at any time. Withdrawing consent will not affect processing that took place before it was withdrawn.

6. Health and Treatment Information

We may need to collect information about your health to determine whether a treatment is suitable and to provide the treatment safely.

Where this information qualifies as special category personal data, we will only process it where an additional legal condition applies. This will normally be your explicit consent. We may also retain or use relevant information where necessary to establish, exercise or defend a legal claim.

You are not required to provide health information. However, we may be unable to provide a treatment when the information is necessary to assess your suitability or protect your safety.

7. Photographs

We may ask to take photographs to document your treatment, monitor your progress or support your treatment records.

Treatment-record photographs will be treated confidentially and will not be published for advertising, social media, portfolio or promotional purposes without separate permission.

You may withdraw permission for future promotional use by contacting us. This will not necessarily require us to remove material that has already been lawfully printed, distributed or published beyond our reasonable control.

8. Online Bookings and Third-Party Websites

Our website may direct you to That Time, a third-party appointment-booking platform.

When you use the booking platform, information such as your name, contact details, appointment selections, booking history and payment information may be collected or processed by the platform.

That Time has its own privacy policy and may act as an independent data controller for some of its activities. You should review its privacy information before providing your details.

Our website may also contain links to other third-party websites, social media platforms or services. We are not responsible for the privacy practices or content of websites operated by other organisations.

9. Who We Share Information With

We do not sell your personal information.

Where necessary, we may share information with carefully selected third parties, including:

  • Our appointment-booking provider.
  • Payment-processing providers and financial institutions.
  • Website hosting, maintenance, security and technical-support providers.
  • Email, cloud-storage and business software providers.
  • Accountants, bookkeepers, insurers, professional advisers and legal representatives.
  • Analytics, advertising and social media providers where those services are enabled and legally permitted.
  • Regulators, courts, law-enforcement agencies, public authorities or other organisations where disclosure is required or permitted by law.
  • Emergency services or relevant professionals where disclosure is reasonably necessary to protect someone’s vital interests.

Service providers acting on our behalf are only permitted to use personal information for the agreed purpose and must protect it appropriately.

10. International Transfers

Some of our technology providers may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is in place. This may include:

  • Transferring information to a country recognised by the UK as providing adequate protection.
  • Using approved contractual safeguards.
  • Relying on another lawful transfer mechanism permitted under UK data protection law.

You may contact us for further information about the safeguards used for international transfers.

11. How Long We Keep Your Information

We only retain personal information for as long as reasonably necessary for the purpose for which it was collected.

Our usual retention periods are:

  • General enquiries that do not result in a booking: normally up to two years after the last communication.
  • Appointment, consultation, consent, patch-test and treatment records: normally up to seven years after your last treatment.
  • Financial and transaction records: normally six years, where required for tax, accounting or legal purposes.
  • Marketing records: until you unsubscribe or withdraw your consent, after which we may retain a limited suppression record to ensure we respect your request.
  • Website security and technical logs: for the period reasonably required to maintain security, investigate issues and operate the website.

We may retain information for longer where required by law, our insurers, a professional obligation, a complaint, an investigation or a potential legal claim.

When information is no longer required, it will be securely deleted, destroyed or anonymised.

12. Cookies and Website Analytics

Our website uses cookies and similar technologies.

Strictly necessary technologies may be used where they are required for the website to operate, provide a requested service, remember privacy choices or maintain security.

Other technologies, including certain analytics, preference and marketing cookies, will only be used where you have provided consent or where another legal exception applies.

You can accept, reject or customise cookies using the consent controls displayed on our website. You can also change your preferences later by selecting the manage-consent option.

Disabling some cookies may affect certain website features.

13. Marketing Communications

We may contact you about treatments, availability, offers or related services where:

  • You have given us consent.
  • You previously purchased or enquired about a similar service and electronic marketing is permitted under applicable law.
  • Another lawful marketing basis applies.

You can unsubscribe at any time by:

  • Using an unsubscribe option included in the communication.
  • Replying and asking us to stop.
  • Emailing laserandbodybyjess@gmail.com.
  • Calling 07464 274155.

You will still receive essential communications relating to an appointment, payment, treatment, complaint or other service you requested.

14. Data Security

We use reasonable organisational and technical measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

Access to personal information is limited to people and service providers who genuinely need it. Those parties must handle the information confidentially and securely.

Although we take appropriate precautions, no online system or electronic transmission can be guaranteed to be completely secure.

15. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

  • Request access to the personal information we hold about you.
  • Ask us to correct inaccurate or incomplete information.
  • Ask us to delete your personal information.
  • Ask us to restrict how your information is used.
  • Object to processing based on legitimate interests.
  • Object to your information being used for direct marketing.
  • Request that certain information be transferred to you or another organisation.
  • Withdraw consent where processing is based on consent.
  • Complain about how your information has been handled.

Some rights are subject to legal conditions and exceptions. We may need to verify your identity before responding to a request.

We normally respond to valid requests within one month. We will tell you when additional time is lawfully required.

To exercise your rights, contact:

Email: laserandbodybyjess@gmail.com
Telephone: 07464 274155

16. Automated Decision-Making

We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

17. Complaints

Please contact us first if you have a concern about how we have handled your personal information. We will investigate your complaint and respond as soon as reasonably possible.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority responsible for data protection.

You can find further information through the Information Commissioner’s Office website.

18. Changes to This Privacy Statement

We may update this Privacy Statement to reflect changes to our services, technology, suppliers or legal obligations.

The latest version will be published on our website and the date at the top of the statement will be updated.

19. Contact Us

Questions, complaints and data-protection requests should be sent to:

Laser & Body by Jess
Aesthetics by Ricci-Jade
54b Girlings Lane
Yarmouth Road
Thorpe St Andrew
Norwich
NR7 0HE

Email: laserandbodybyjess@gmail.com
Telephone: 07464 274155

Schedule Your Appointment

Reserve your spa day now and step into a world of peace, relaxation, and pure indulgence.