Last updated: [Add date]

At All About The Face (“we”, “us”, “our”), we are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your data when you visit our website, make a booking, or contact us.

By using our website, you agree to the practices described in this policy.

1. Information we collect

We may collect the following types of information:

1.1 Personal information

Provided directly by you when:

• Making a booking
• Completing a contact form
• Signing up for updates
• Communicating with us

This may include:

• Name
• Email address
• Phone number
• Appointment details
• Payment details (processed securely through third-party providers)

We do not store full payment card details on our website or servers.

1.2 Automatically collected information

When you browse our website, we may automatically collect:

• IP address
• Device information
• Browser type
• Pages viewed
• Time spent on the site
• Referring websites

This is gathered through cookies and analytics tools.

1.3 Cookies and tracking technologies

Our website uses:

• Google Analytics to help us understand website performance
• Essential cookies for core site functionality
• Functionality cookies for booking and navigation

You can manage or disable cookies through your browser settings.

2. How we use your information

We use your information to:

• Process and manage your bookings
• Contact you regarding your appointments
• Respond to enquiries or customer service requests
• Improve our website and user experience
• Send marketing communications (only with your consent)
• Ensure the security and proper functioning of our website

We will never sell your information to third parties.

3. Our legal basis for processing

Under UK GDPR, we rely on the following legal bases:

• Contract – when you make a booking or request a service
• Consent – for marketing communications and non-essential cookies
• Legitimate interest – to improve site performance, prevent fraud, and analyse usage
• Legal obligation – where required for tax, accounting, or regulatory purposes

4. How we share your information

We may share your data with trusted third parties who help us operate our business, including:

• Booking and scheduling platforms
• Payment processors
• Email or SMS communication providers
• Analytics services (e.g., Google Analytics)
• Web hosting and security services

These third parties only process data on our behalf and must comply with data protection regulations.

We do not allow third parties to use your data for their own marketing.

5. Data storage and security

Our website is built using a Next.js headless frontend with a WordPress CMS backend.
We use secure hosting, encrypted connections (HTTPS), and industry-standard security measures to protect your data.

Your information is stored securely and only for as long as necessary to fulfil the purposes outlined in this policy.

6. International data transfers

Some of our third-party service providers may store or process data outside the UK or EU.
Where this occurs, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Secure, GDPR-compliant providers

7. Your rights

Under data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time
• Request a copy of your data (“data portability”)

To exercise any of these rights, contact us at:

[Add your business email here]

8. Marketing communications

You will only receive marketing messages from us if you have opted in.

You can unsubscribe at any time by:

• Clicking “Unsubscribe” in our emails, or
• Contacting us directly

9. Children’s privacy

Our website and services are not intended for individuals under the age of 16, and we do not knowingly collect personal data from children.

10. Third-party websites

Our website may contain links to external websites.
We are not responsible for their privacy practices or content.

11. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

12. Contact us

If you have questions about this policy or how your data is handled, please contact:

All About The Face
Email: [Add email]
Phone: [Add phone]
Address: [Add business address]