Privacy Policy

How we collect, use and protect your personal information

Last updated: April 2026

This privacy policy explains how Beautique Beauty and Aesthetics ("Beautique", "we", "us", "our") collects, uses, stores and protects your personal information when you visit our website (beautiquebeautyandaesthetics.co.uk), book a treatment, enrol on a training course, or otherwise interact with us. Beautique operates as a beauty salon, aesthetics clinic and City & Guilds accredited training academy at 2 Ferriby Road, Hessle, Hull, East Yorkshire, HU13 0PG.

We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Beautique Beauty and Aesthetics is the data controller for the personal information collected through this website and at our premises for our own salon, clinic and academy services. Our registered address is 2 Ferriby Road, Hessle, Hull, East Yorkshire, HU13 0PG. For any privacy-related questions or to exercise your rights, please contact us on 01482 230699 or via our contact page.

Tenants and Independent Practitioners

Beautique is also home to independent tenants and practitioners who operate their own businesses from our premises, including Markings Tattoos and independent beauty therapists. Where you book directly with a tenant, or provide information to them, that tenant is the data controller for their own services and you should refer to their own privacy policy. Beautique only processes data on behalf of tenants where we have a written arrangement in place.

What Information We Collect

We may collect the following categories of personal information:

  • Contact information: your name, email address, phone number and, where relevant, your address.
  • Booking information: the treatment or appointment you have booked, date and time, preferences, and any notes you provide.
  • Health and medical information: information relevant to your treatment, including allergies, medical conditions, medications, pregnancy, previous treatments, skin concerns and consent form responses. This is classed as special category data under UK GDPR and is only collected where necessary to deliver treatments safely.
  • Photographs: before-and-after photographs taken during aesthetic treatments, where you have given explicit consent.
  • Training and course information: for students enrolling on City & Guilds accredited or in-house training courses, we collect information needed to register you, verify prerequisites, process your qualification and maintain course records (including attendance, assessments and certification).
  • Payment information: payments, deposits and booking fees are processed securely by Stripe. We do not see or store your full card details.
  • Identification: for certain aesthetic treatments or course enrolments, we may need to see proof of age or identification. We record that ID was verified but do not routinely retain copies.
  • Website usage data: basic technical information such as your device type, browser and the pages you visit, collected via essential cookies (see our Cookie Policy).
  • Correspondence: any messages you send us via our website forms, email, phone, SMS or social media.

How We Use Your Information

We use your personal information to:

  • Manage your bookings, appointments and consultations
  • Deliver treatments safely and in line with clinical and insurance requirements
  • Process payments, deposits and refunds
  • Enrol students on training courses and maintain accurate course and assessment records
  • Register students with awarding bodies (such as City & Guilds) where relevant
  • Send you appointment reminders, course updates and aftercare information
  • Respond to your enquiries and provide customer support
  • Keep accurate treatment records as required by insurers and regulators
  • Meet our legal and regulatory obligations
  • Improve our services, premises and website

We will only send marketing communications where you have opted in, and you can unsubscribe at any time.

Legal Basis for Processing

Under UK GDPR we rely on the following legal bases:

  • Contract: to fulfil your booking, deliver your treatment or course, and process payment.
  • Legitimate interests: to run and improve our business, respond to enquiries, prevent fraud, and keep our premises and clients safe.
  • Legal obligation: to comply with health and safety, insurance, tax and accounting requirements.
  • Consent: for processing health and medical information, before-and-after photography, and marketing communications. You can withdraw consent at any time.

Health and Special Category Data

Because we provide aesthetic and beauty treatments, we need to collect information about your health and medical history. This is special category data under UK GDPR and we handle it with additional care. We collect it only where necessary to assess your suitability for treatment and to keep you safe. It is stored securely with restricted access, used only for the purposes of your treatment, and shared with no one outside Beautique except where required by law or in a genuine medical emergency.

You provide this information with your explicit consent on our consultation and consent forms. You can withdraw that consent at any time, though in some cases this may mean we can no longer provide a specific treatment.

Training Academy and Student Data

If you enrol on one of our courses, including City & Guilds accredited qualifications, we process additional information such as your full name, date of birth, prior qualifications, attendance, practical and written assessment results and certification. Where a course is accredited, we are required to share relevant information with the awarding body (for example City & Guilds) so that they can register you, moderate assessments and issue your qualification. Course records are retained for the period required by the awarding body and our own quality assurance policies.

Children

Our aesthetic injectable treatments are only provided to clients aged 18 and over, in line with UK law. Other beauty treatments may be available to under-18s only with the written consent of a parent or guardian and, where appropriate, their presence at the appointment. We do not knowingly collect data from children through our website.

Payment Processing

All online and in-clinic card payments are processed securely through Stripe. Stripe is an independent data controller for the payment information you provide. We do not store, process or have access to your full card details. Stripe's privacy policy is available at stripe.com/privacy.

How We Store Your Information

Your personal information is stored on secure systems with encryption and access controls. Consultation and consent forms submitted online are stored in a private, access-controlled storage area and can only be accessed via time-limited secure links by authorised staff. Paper records held on the premises are kept in locked storage with restricted access.

How Long We Keep Your Information

We only keep your personal information for as long as necessary:

  • Consultation and treatment records: retained for a minimum of 8 years after your last treatment, in line with standard insurance requirements for aesthetic and beauty practice.
  • Booking and appointment records: typically retained for up to 7 years for accounting and tax purposes.
  • Training and course records: retained for the period required by the relevant awarding body (for example City & Guilds), and for our own quality and audit purposes.
  • Marketing contact details: retained until you unsubscribe or ask us to remove you.
  • Website enquiries: retained for up to 2 years where no booking is made.

Sharing Your Information

We do not sell your personal information to anyone. We will only share your information with:

  • Stripe – for payment processing.
  • Headless Digital – our website and CMS provider, who processes data on our behalf as a data processor to operate the website, booking system and consultation forms.
  • City & Guilds and other awarding bodies – where you are enrolled on an accredited course and this is needed to register you and issue your qualification.
  • Our insurers and professional bodies – where necessary in connection with a claim, complaint or regulatory matter.
  • Medical professionals or emergency services – where necessary to protect your vital interests.
  • Law enforcement or regulators – where we are legally required to do so.

Cookies

Our website only uses essential cookies needed to operate the site and booking system. We do not use Google Analytics, advertising trackers, social media pixels or any other third-party tracking on this site. For full details please see our Cookie Policy.

Your Rights

Under UK GDPR, you have the right to:

  • Be informed about how we use your data
  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data, where we are not required to keep it for legal or regulatory reasons
  • Restrict or object to the processing of your data
  • Withdraw consent at any time where processing is based on consent
  • Request a copy of your data in a portable format
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113

To exercise any of these rights, please contact us using the details below. We will respond within one month.

Contact Us

If you have any questions about this privacy policy or how we handle your personal information, please contact us:

  • Phone: 01482 230699
  • Address: Beautique Beauty and Aesthetics, 2 Ferriby Road, Hessle, Hull, East Yorkshire, HU13 0PG
  • Online: via our contact page

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our services, legal requirements or best practice. Any updates will be posted on this page with a revised "last updated" date. Please check back periodically.