Privacy Policy

1. Who We Are

Savage BeautyLuxe is a private beauty studio operating in Salford Quays, Manchester, England. We are the data controller for all personal information collected through this website and during the provision of our services.

For any data-related enquiries or to exercise your rights, please contact us via our Contact page or email hello@savagebeautyluxe.co.uk.

2. What Personal Data We Collect

We collect the following personal data when you use our website or book a service:

• Identity data: first name, last name, and age confirmation (you must confirm you are 18 or over)
• Contact data: email address and phone number
• Booking data: selected service, preferred date and time, appointment notes
• Date of birth (optional): provided voluntarily for promotional purposes only — this is never mandatory
• Payment data: deposit amount paid — we do not store card or bank details
• Communications: messages sent via our contact form or in response to our emails
• Marketing preferences: whether you have opted in to receive promotional communications

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and manage your appointment booking
• To send booking confirmations, appointment reminders, and aftercare information by email or SMS
• To respond to enquiries submitted via our contact form
• To manage cancellations, rescheduling, and deposit payments
• To send promotional offers and relevant updates (only if you have opted in to marketing communications)
• To meet our legal and record-keeping obligations

We do not use your data for automated decision-making or profiling. Marketing communications are only sent where you have given explicit consent, and you may opt out at any time.

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contract performance: processing your booking and delivering the service you have requested
• Legitimate interests: managing our business operations, sending aftercare instructions related to your treatment, responding to enquiries, and maintaining records
• Consent: sending marketing communications and promotional offers — you may withdraw consent at any time
• Legal obligation: where we are required to retain records under applicable law

5. Marketing Communications

If you opt in to marketing communications at the time of booking, we may send you:

• Promotional offers and birthday treats (if you have provided your date of birth)
• Aftercare reminders and follow-up check-ins related to your treatment
• Rebooking reminders
• Seasonal promotions and special offers

You can opt out of marketing communications at any time by replying STOP to any SMS, clicking the unsubscribe link in any email, or contacting us directly. Opting out of marketing will not affect essential service communications such as booking confirmations and appointment reminders.

6. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Booking and financial records: retained for up to 6 years after your last appointment, in accordance with HMRC record-keeping requirements
• Contact form enquiries: retained for up to 12 months
• Marketing contact records: retained for up to 2 years from your last activity, or until you request deletion
• Date of birth: retained for as long as you remain an active client, or until you request its removal

When personal data is no longer required, it is securely deleted. You may request deletion of your data at any time, subject to our legal obligations.

7. Third Parties

We may share your personal data with trusted third-party service providers who assist us in operating our business. These include:

• Our website hosting provider
• Our payment processor (we never see or store your card details)
• Our email delivery provider
• Our SMS delivery provider (where you have opted in to receive messages)

We do not sell, rent, or trade your personal data with any third party for marketing purposes. All service providers we work with are contractually required to handle your data securely and in compliance with UK data protection law.

8. International Data Transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent protections, to ensure your data remains protected to UK GDPR standards.

9. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your data where there is no legitimate reason to retain it
• Restriction: request that we limit how we process your data in certain circumstances
• Portability: receive your data in a structured, commonly used format
• Objection: object to processing where we rely on legitimate interests
• Withdraw consent: withdraw marketing consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us via our Contact page or email hello@savagebeautyluxe.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Cookies

This website uses only essential functional cookies required to operate the booking system. These cookies do not track you, are not used for advertising, and no third-party tracking cookies are set.

Anonymised, aggregated page-view statistics may be collected. No personal information is linked to this data.

11. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data is transmitted over secure, encrypted connections. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children's Data

Our services are only available to individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has provided us with personal data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated effective date. Continued use of our website or services after changes are posted constitutes acceptance of the revised policy.

Last updated: April 2026