Privacy Policy

At Sulis Beauty and Holistic Therapies, we respect your privacy and are committed to protecting your personal data. This policy outlines how we collect, use, store, and protect your information when you book and receive our mobile services.

1. Who We Are

Sulis Beauty and Holistic Therapies is a mobile therapy business operating across Northamptonshire. For the purposes of the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, the Data Controller is Mandy Ranger

2. The Personal Data We Collect

We collect data required to manage your bookings safely and legally:

Identity and Contact Data: Full name, home address (for mobile visits), email address, and phone number.

Financial Data: Credit/debit card details (processed securely; we never see or store your full card details).

Special Category Data (Health Data): Medical history, allergies, skin conditions, pregnancy status, and lifestyle factors.

3. How We Collect Your Data

We collect data directly from you through our digital platforms:

Booking Details: Submitted by you via our Wix booking forms.

Health and Consultation Data: Submitted by you via our online digital medical questionnaire prior to your treatment.

Payment Details: Submitted securely by you online through our payment processor.

4. How and Why We Use Your Data

We process your data under the following GDPR legal bases:

Performance of a Contract: To process your appointment booking, manage scheduling, and travel to your location.

Explicit Consent: By filling out our online medical questionnaire, you give explicit consent for us to process your health data. This is strictly required to ensure treatments are safe and to screen for contraindications.

Legal Obligation & Legitimate Interests: To maintain records required by our professional insurance provider and for UK tax accounting.

Note: We do not use your data for marketing purposes or send promotional newsletters.

5. Sharing Your Data

We do not sell, rent, or distribute your data. We share your information only with trusted service providers necessary to operate our business:Wix: Hosts our website, booking forms, and stores online health questionnaires securely.

Stripe: Processes your online £5 booking deposit securely. Stripe complies with strict PCI-DSS payment standards.

Balens Ltd: Our professional insurance provider, with whom records may be shared if required to comply with policy conditions or in the event of a claim.

6. Data Security and Retention

Security: Your digital data is stored securely within password-protected, encrypted cloud databases provided by Wix and Stripe.

Retention: We hold your contact and health records for a minimum of 7 years following your last treatment. This timeframe is strictly required by our insurer, Balens, and UK tax laws. After this period, your digital records will be permanently deleted.

7. Your Rights Under GDPR

Under GDPR, you have the right to:

Access the personal information we hold about you.
Rectify any inaccurate or incomplete data.
Request erasure of your data (subject to our legal and insurance obligations to retain records).
Withdraw consent for us to process your health data at any time (please note this will mean we can no longer provide treatments).

8. Contact Details

For questions, data requests, or to exercise your rights, please contact:

Data Controller: Mandy Ranger
Email: Sulisbeauty568@gmail.com
Phone: 07922704139