Privacy Policy

1 Who We Are

Nails Deluxe Bristol is the data controller for personal information collected via this website.

Business name: Nails Deluxe Bristol
Address: 123 Clifton Village, Bristol, BS8 4AA
Email: hello@nailsdeluxebristol.co.uk
Phone: 0117 400 0000

2 Information We Collect

We may collect the following types of personal information:

• Identity data — your first name and last name
• Contact data — your email address and telephone number
• Appointment data — your preferred service, requested date, and any notes you provide
• Technical data — IP address, browser type, and basic analytics when you visit our website (collected via cookies, with your consent)

We do not collect any special category data (such as health information) unless you voluntarily share it in your appointment notes (for example, nail allergies), in which case it is used solely to provide your service safely.

3 How We Use Your Information

We use your personal data for the following purposes:

• To respond to your booking enquiry and confirm appointments
• To send appointment reminders or follow-up messages (with your consent)
• To manage our client records and provide ongoing services
• To comply with legal and regulatory obligations
• To improve our website and services based on aggregate analytics

We will only use your personal data for the purpose it was collected. If we need to use it for a different reason, we will notify you.

4 Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Consent — where you have ticked the consent box on our contact form
• Contractual necessity — to fulfil your appointment booking
• Legitimate interests — to manage and improve our business, where this does not override your rights
• Legal obligation — where we are required by law to retain records

5 Sharing Your Data

We do not sell or rent your personal data to third parties. We may share your data with:

• Our booking or email service providers (who are contractually obligated to keep your data secure and confidential)
• Regulatory authorities or law enforcement, if required by law

All third-party processors we use are based in the UK or are compliant with UK GDPR adequacy standards.

6 How Long We Keep Your Data

We retain your personal data only for as long as necessary:

• Booking enquiry data is held for up to 2 years from your last appointment or enquiry
• Financial and transactional records are retained for 7 years for legal and tax purposes
• Data you ask us to delete will be removed within 30 days, unless we are legally required to keep it

7 Cookies

Our website may use cookies to improve your browsing experience. These include:

• Essential cookies — required for the website to function correctly
• Analytics cookies — to understand how visitors use our site (collected only with your consent)

You can manage your cookie preferences through your browser settings. Disabling cookies may affect some website functionality.

8 Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data (the "right to be forgotten"), subject to legal obligations
• Restriction — request that we limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details below. We will respond within one calendar month.

9 Data Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website uses HTTPS encryption, and access to client records is restricted to authorised staff only.

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours as required by law.

10 Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us first.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will always reflect the most recent version. We encourage you to review this page periodically.