​

Garnet Beauty & Skincare

Effective date: 18 October 2026

​

1. Introduction

​

Garnet Beauty & Skincare respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, book an appointment or receive a treatment.

We handle personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended where applicable.

​

2. Who is responsible for your information?

​

The data controller responsible for your personal information is:

​

Business name: Garnet Beauty & Skincare
Email: info@garnetbeauty.co.uk
Telephone: 074080708020
Business address: Thatcham House/ Suite 4, Turners Drive, RG19 4QD, Thatcham

Please contact us using these details if you have questions about this Privacy Policy or wish to exercise your data protection rights.

​

3. What information do we collect?

​

Depending on the services you use, we may collect the following information.

Personal and contact information

• Name, email address and telephone number.

• Contact and communication preferences.

Booking and payment information

• Appointment dates, times and treatment bookings.

• Booking history, cancellations and relevant payment records.

• Transaction references and payment status.

Card payments may be processed by an external payment provider. We do not intend to collect or store your full payment card details ourselves.

Consultation and health information

• Relevant medical history and existing health conditions.

• Medication, allergies and treatment-related precautions.

• Information about recent surgery, injuries, scars or swelling where relevant to treatment.

• Consultation responses, treatment notes, consent records and aftercare advice.

We only request health information that is relevant to assessing treatment suitability and providing appropriate services.

Website information

• Technical information, such as browser type and device information.

• Cookie preferences and website usage information, where collected.

Communications

• Messages, enquiries, feedback and complaints you send to us.

​​

4. How do we use your information?

​

We may use your information to:

• Manage bookings and appointments.

• Contact you about appointments, changes or cancellations.

• Conduct consultations and assess whether a treatment is suitable.

• Provide reflexology, Manual Lymphatic Drainage (MLD), scar therapy, beauty treatments and other services you book.

• Record relevant treatment information and aftercare advice.

• Process payments, refunds and accounting records.

• Respond to enquiries and complaints.

• Meet applicable legal, insurance and professional obligations.

• Protect our clients, staff and business.

• Improve our website and services where permitted by law.

We do not use health information for unrelated advertising.

​

5. Our lawful bases for processing information

​

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the purpose, we may rely on:

• Contract: To manage your booking and provide the services you request.

• Legal obligation: To meet applicable legal, accounting or regulatory requirements.

• Legitimate interests: To manage and protect our business, maintain appropriate records and respond to enquiries, where these interests do not override your rights.

• Consent: Where consent is the appropriate lawful basis, including for certain marketing activities.

Health information is special-category personal data. In addition to a lawful basis under Article 6 UK GDPR, we must identify an appropriate condition under Article 9 and comply with any applicable safeguards.

The condition used for health information will depend on the actual purpose and circumstances of processing. Where explicit consent is the appropriate condition, we will obtain it. We will not assume that consent to receive a treatment automatically provides consent for every use of health information.

​

6. How do we protect your health information?

​

We treat consultation forms and treatment records as confidential.

We take reasonable technical and organisational measures to protect information from unauthorised access, loss, alteration or disclosure.

Access to client records is limited to people who need the information for legitimate business, treatment or legal purposes.

Please tell us if your medical circumstances change before a treatment so that we can reassess suitability where necessary.

 

7. Who may receive your information?

​

We may share relevant information with trusted service providers where necessary, including:

• Booking and appointment platforms, such as Fresha, if used.

• Payment processors.

• Website hosting and IT providers.

• Accounting services and professional advisers.

• Insurers, where necessary for legitimate claims or policy requirements.

• Regulators or public authorities where we are legally required to provide information.

• Healthcare professionals or emergency services where disclosure is appropriate and lawful, including where necessary to protect someone's vital interests.

We only share information where there is an appropriate reason and lawful basis. We do not sell your personal information.

Third-party providers may process information under their own privacy policies and contractual obligations.

​

8. International transfers

​

Some service providers may store or process personal information outside the United Kingdom.

Where an international transfer takes place, we will ensure that the applicable legal requirements are met, including any necessary adequacy arrangements or appropriate safeguards.

Further information about relevant providers can be requested using our contact details.

​

9. How long do we keep your information?

​

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

Different retention periods may apply to:

• Booking and contact records.

• Financial and accounting records.

• Consultation forms and treatment records.

• Consent records, complaints and insurance-related documents.

We determine retention periods by considering applicable legal obligations, professional guidance, insurance requirements, the nature of the records and the need to establish or defend legal claims.

When information is no longer required, we will securely delete it or anonymise it where appropriate, unless there is a lawful reason to retain it.

​

10. Your data protection rights

​

Subject to applicable law and any relevant exemptions, you may have the right to:

• Access: Request a copy of the personal information we hold about you.

• Rectification: Ask us to correct inaccurate or incomplete information.

• Erasure: Ask us to delete information in certain circumstances.

• Restriction: Ask us to restrict certain processing.

• Objection: Object to processing carried out under certain lawful bases.

• Data portability: Request certain information in a portable format where the legal conditions apply.

• Withdraw consent: Withdraw consent where our processing relies on consent.

These rights are not absolute. For example, we may need to retain certain records to comply with legal obligations or establish, exercise or defend legal claims.

To exercise your rights, contact us using the details in Section 2. We may need to verify your identity before responding.

​

11. Marketing communications

​

We may contact you about our services where permitted by law.

We will obtain consent where required for direct marketing. You can opt out of marketing emails or messages at any time by using the unsubscribe facility, where available, or contacting us directly.

Opting out of marketing will not prevent us from sending essential messages relating to your bookings, payments or treatments.

​

12. Cookies and website technologies

​

Our website may use cookies and similar technologies to support essential website functions and, where enabled, analyse website usage or measure marketing performance.

Non-essential cookies will be used only where the required consent has been obtained.

Please see our separate Cookie Policy for information about the technologies used and how to manage your preferences.

​

13. Third-party websites

​

Our website may contain links to external websites or booking services. We are not responsible for the privacy practices of independent third-party websites.

Please read the relevant provider's privacy policy before submitting personal information through its services.

 

14. Children's information

​

Where we provide services to children or young people, we handle their information in accordance with applicable law, safeguarding requirements and relevant professional guidance.

We take appropriate steps to establish who may provide consent or act on a young person's behalf where required.

​

15. Complaints

​

If you have concerns about how we handle your personal information, please contact us first so that we can investigate.

You also have the right to complain to the UK Information Commissioner's Office (ICO):

Website: https://ico.org.uk/
Telephone: 0303 123 1113

​

16. Changes to this Privacy Policy

​

We may update this Privacy Policy to reflect changes in our business, services, systems or legal obligations.

The latest version will be published on our website, with the updated date shown at the top.

​

Contact us

​

For privacy-related questions or requests, please contact:
Business name: Garnet Beauty & Skincare
Email: info@garnetbeauty.co.uk
Telephone: 074080708020
Business address: Thatcham House/ Suite 4, Turners Drive, RG19 4QD, Thatcham