Privacy Policy

Wumi Body & Face Studio ("we", "us", "our") is committed to protecting your privacy and handling your personal data transparently and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are (Data Controller)

• Business name: Wumi Body & Face Studio
• Company number: 16735586
• Registered/base address: Copperfields Walk, Dartford, Kent, DA1 2DE
• Email: hello@wumibodyandfacestudio.co.uk
• Phone: 07888 680560

For any privacy question or to exercise your rights, contact us using the details above.

2. The information we collect

• Identity & contact data: name, email address, phone number, and the address where a mobile treatment is to be carried out.
• Booking data: the services you book, appointment dates/times, and your booking history (processed through our scheduling provider, Acuity Scheduling).
• Health & consultation data: information you share during your consultation and on any consent or suitability form (e.g. relevant medical history, pregnancy, recent surgery, medical clearance for post-operative lymphatic drainage). This is special category data and is treated with extra care.
• Payment data: payment is processed by our booking/payment provider; we do not store full card details.
• Technical data: when you use our website — IP address, browser type, device information, and pages visited (see our Cookie Policy).

3. How and why we use your information (lawful bases)

Purpose	Lawful basis
Manage bookings, consultations and treatments	Performance of a contract
Assess your suitability and safety for treatment	Explicit consent / vital interests (special category data)
Take payment and manage deposits	Performance of a contract
Respond to enquiries	Legitimate interests
Send appointment reminders	Performance of a contract
Send marketing (only if you opt in)	Consent
Meet legal, tax and insurance obligations	Legal obligation

We will only process your health information with your explicit consent, given before treatment.

4. Sharing your information

We do not sell your data. We share it only with trusted providers who help us run the business, including:

• Acuity Scheduling (appointment booking)
• Our payment processor
• Our insurer (Hiscox, via Salon Gold / Henry Seymour & Co) in the event of a claim
• Professional or legal advisers, or authorities, where legally required

5. How long we keep your data

• Client treatment & consultation records: retained for the period recommended for aesthetic/beauty practitioners and our insurer (typically up to 7 years from your last treatment, or longer where required for insurance/legal reasons).
• Enquiry data: up to 24 months if no booking follows.
• Marketing data: until you unsubscribe.

6. Your rights

Under UK GDPR you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and withdraw consent at any time. To exercise any right, email hello@wumibodyandfacestudio.co.uk. We respond within one month.

7. Data security

We use appropriate technical and organisational measures to keep your data secure. Our booking and payment providers maintain their own industry-standard security.

8. Complaints

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113. We'd appreciate the chance to resolve it first.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows the latest version.