Privacy Policy

Who we are

NAE2SLAE LTD (company 16406368), 25 Coldharbour Lane, London SE5 9NR, nae2slae@gmail.com. We are the data controller.

What we collect

• ✦Bookings: name, contact details and appointment history, through our booking system (Acuity). Online deposits and card payments are processed by Square. We do not see or store full card numbers.
• ✦Consultation forms: completed on paper before treatment. They may include health information such as allergies, medications, and skin, eye or dental conditions. They are not stored in Acuity or on our website.
• ✦Training and coaching enquiries: what you send through our website forms, stored securely and only visible to authorised NAE2SLAE staff.
• ✦VIP List: first name, email, when you joined, your consent and the page you signed up on.
• ✦Digital purchases: handled by Stan Store. We receive your name, email and order details.
• ✦Photos: only with your consent.

Why we use it and our legal basis

• ✦To provide treatments, training and coaching: contract.
• ✦To keep financial and tax records: legal obligation.
• ✦To handle enquiries, keep the site secure and prevent spam: legitimate interests.
• ✦To send VIP List emails: consent, which you can withdraw at any time.

Health information

Health information is "special category" data. We use it only to check whether a treatment is suitable and safe for you. Our lawful basis is contract (Article 6(1)(b)), and the Article 9 condition we rely on is your explicit consent (Article 9(2)(a)). Where we need to keep a record to establish or defend a legal claim, we rely on Article 9(2)(f).

How paper consultation forms are kept

In a locked cabinet at the salon. Only the owner and the staff treating you can access them. When records are due for destruction, they are shredded.

Who we share with

Acuity Scheduling (bookings); Square (deposit payments and card on file); Stan Store (digital sales); our website host and database provider; Google, only if you choose to load the map on our Contact page; our bank, accountant, insurers and advisers where needed; authorities where the law requires. We do not sell your data. We do not currently use an email marketing provider. If we start using one, we will update this policy first.

International transfers

Some providers may store data outside the UK (for example in the US) under safeguards recognised by UK data protection law, as set out in those providers' own terms.

How long we keep it

We keep information only as long as we need it for the purpose it was collected, to meet legal, tax and insurance requirements, and to deal with any claims. We are finalising a detailed schedule and will publish it here.

VIP List (marketing emails)

• ✦When you join the NAE2SLAE VIP List we store your first name, email address, the date and time you joined, the date and time you gave consent, the consent wording you agreed to and the page you signed up on. We only add you if you tick the consent box.
• ✦We use these details only to send you NAE2SLAE news about appointments, offers, training dates, digital releases and launches. We do not sell or share your details. Access is restricted to authorised NAE2SLAE administrators.
• ✦We keep your details while you remain subscribed. You can withdraw consent or ask us to delete your details at any time by emailing nae2slae@gmail.com. If you unsubscribe, we keep a minimal record that you opted out so we don't email you again, unless you ask us to delete it.

Your rights

Access, correction, deletion, restriction, objection, data portability, and withdrawing consent. Email nae2slae@gmail.com. You can also complain to the ICO (ico.org.uk).