Last updated: 15/01/2026

1. Introduction

Jane Smith Beauty (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with us online or contact us directly.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Who We Are (Data Controller)

Business name: Jane Smith Beauty

Website: https://janesmithbeauty.co.uk

Email: info@janesmithbeauty.co.uk

Country of operation: United Kingdom

Jane Smith Beauty is the data controller, meaning we determine how and why your personal data is processed.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:

a) Information you provide directly

Full name

Email address

Telephone number

Booking and enquiry details

Marketing preferences

Messages sent via contact forms, email, or WhatsApp

b) Automatically collected data

IP address

Device type, browser type, and operating system

Pages visited and time spent on the website

Referral source (how you found our website)

c) Special category data

We do not intentionally collect medical or health data through our website. Any sensitive information shared outside the website (e.g. during consultations) is handled separately and confidentially in line with professional and legal obligations.

4. How We Collect Your Data

Your data is collected when you:

Complete an enquiry or contact form

Book an appointment online

Subscribe to our mailing list

Communicate with us by email, phone, or WhatsApp

Browse our website and accept cookies

5. How We Use Your Data

We use your data to:

Respond to enquiries and messages

Manage appointments and bookings

Provide our services

Send appointment-related communications

Send marketing communications (only with consent)

Improve our website and customer experience

Monitor website performance and security

Comply with legal and regulatory obligations

6. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Consent – for marketing emails, cookies, and analytics

Contract – to manage bookings and provide services

Legitimate interests – for website security, service improvement, and fraud prevention

Legal obligation – where required by law

You may withdraw consent at any time.

7. Marketing & Email Subscriptions

If you subscribe to our mailing list:

We will only send marketing communications if you have explicitly opted in

You can unsubscribe at any time using the link in our emails

We do not sell, rent, or share your data for third-party marketing

Transactional or service-related emails (e.g. booking confirmations) may still be sent where necessary.

8. Cookies & Consent

We use cookies and similar technologies to:

Ensure website functionality

Analyse website traffic

Improve performance and user experience

Support advertising and marketing

Non-essential cookies (analytics and marketing cookies) are only used after you give consent via our cookie banner.

You can manage or withdraw your cookie preferences at any time.

9. Analytics & Advertising

With your consent, we may use:

Google Analytics – to analyse website usage

Meta (Facebook & Instagram) Pixel – to measure ad performance and show relevant ads

These services may process pseudonymised data such as IP address, device information, and browsing behaviour.

10. Data Sharing

We may share your data with trusted third parties such as:

Website hosting providers

Booking and scheduling systems

Email marketing platforms

Analytics and advertising providers

All third parties are contractually required to process data securely and in compliance with UK GDPR.

We never sell your personal data.

11. International Data Transfers

Where data is transferred outside the UK, appropriate safeguards (such as adequacy decisions or standard contractual clauses) are in place to protect your data.

12. Data Retention

We retain personal data only for as long as necessary:

Enquiries: up to 12 months

Marketing data: until consent is withdrawn

Booking records: as required for business and legal purposes

13. Your Rights

You have the right to:

Access your personal data

Request correction of inaccurate data

Request deletion of your data

Restrict or object to processing

Withdraw consent at any time

Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: https://www.ico.org.uk

14. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, misuse, or disclosure.

15. Children’s Privacy

Our website and services are not intended for individuals under the age of 16, and we do not knowingly collect data from children.

16. Changes to This Privacy Policy

We may update this policy from time to time. The latest version will always be available on this page with the updated date shown above.

17. Contact Information

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Email: info@janesmithbeauty.co.uk