Privacy and Data Protection Policy
At Icon Beauty, we take great care to safeguard personal data provided by our clients and to process this data fairly and lawfully in accordance with the Data Protection Act 1998 and the new General Data Protection Regulations 2018 (GDPR).
We request the minimum level of personally identifying information to run our business effectively. This is data you provide to us directly, for example your name and contact details. We will never obtain information about you indirectly from sources outside of our business. We store notes with respect to services we under-take and we consider you have provided consent for us to store personally identifying information based on your receiving services from us. Depending on the service(s) we are providing we may be required to ask questions relevant to your medical history. We will obtain your consent prior to storing information related to your medical history.
When providing details about yourself you can be confident that:
- Any information you provide to us is confidential and secure. All records are stored in a locked, secure file and no private health information is stored electronically.
- We will always endeavour to keep accurate and up to date information on you.
- We will not share or sell your details to other organisations, for example marketing or fundraising purposes.
- You have the right to request access to the data we hold on you, and the right to request we delete that data.
In accordance with the new GDPR regulations, we are obliged to retain documented evidence of individuals opting in to receive communications from us, either electronically, on paper or face to face. This data is filed in our client database and/or paper filing system, depending on the way the individual opted in.
We adhere to an opt-in system for our emails, so we will only ever send emails to those who have requested them. You can remove yourself from the mailing list anytime via the link to unsubscribe at the bottom of every email or by emailing email@example.com and requesting your email address is removed from the list. If you wish, you can also request all data we hold on you is deleted.
You have the right to request a copy of all data we hold on you, as well as the ‘right to be forgotten’ (request that all data we hold on you is deleted or anonymised). If you would like to exercise your right to request your data, or be forgotten, please email firstname.lastname@example.org or call 0117 924 5566 to let us know and we will implement your request within the required 30 days.
Your contact details
If you are a client of Icon Beauty we need your name, telephone number and email address to contact you via phone, email or SMS to remind you of upcoming appointments or advise of the need to reschedule an appointment. We consider your having made the appointment as consent to undertake this activity, but you may opt out at any time. We do not add people to our contact list unless they have explicitly given us permission to do so, either electronically, on paper, or verbally.
Contact and communication through our website
Clients contacting us through this website do so at their own discretion and provide any such personal details requested at their own risk. This includes the purchasing of gift vouchers and using third-party payment systems such as PayPal. Your personal information is kept private and stored securely until a time it is no longer required or has no use. Where we have clearly stated and made you aware of the fact, and where you have given your express permission, we may use your details to send you products/services information through a mailing list system. This is done in accordance with the regulations named in the Icon Beauty policy above.
External website links
Our website may contain links to other websites of interest. We cannot guarantee or verify the contents of externally linked websites despite our best efforts. Users should therefore note they click on external links at their own risk and we cannot be held liable for any damages or implications caused by visiting any external links mentioned.
Social media policy
We adopt a Social Media Policy to ensure our business and our staff conduct themselves accordingly online. While we may have official profiles on social media platforms, users are advised to verify authenticity of such profiles before engaging with or sharing information with such profiles. We will never ask for user passwords or personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with us on social media. There may be instances where our website features social sharing buttons, which help share web content directly from web pages to the respective social media platforms. You use social sharing buttons at your own discretion and accept that doing so may publish content to your social media profile feed or page.