Privacy Policy

1. Who we are

NUDE is a beauty and hair removal business operated by Iva, trading as NUDE, at Vanity Rooms, 64 New Rd, Gravesend, DA11 0AE. For the purposes of UK data protection law, NUDE is the Data Controller.

You can reach us by email at simplynude@protonmail.com or by phone on 07498 444830.

2. What personal data we collect

• Identity data: first name and last name.
• Contact data: phone number and email address.
• Booking data: appointment dates, the treatments you book, and your booking history.
• Health and consultation data: allergies, skin sensitivities, medical conditions relevant to treatment, medication that affects suitability, and patch test results.
• Essential technical data: limited request, browser, device, security and diagnostic information that hosting infrastructure may process to deliver and protect the website.
• Optional analytics data: pages visited, referral source, browser or device details, pseudonymous identifiers and selections of booking or contact links, collected by Google Analytics only when it is configured and you accept it.
• Communications data: the enquiries you send us by email, phone or WhatsApp.

We do not collect or store payment card details through this website. Online payments made through Treatwell are handled by Treatwell and by any card processor it uses, each under their own privacy policy.

3. Special category data

Health information collected during your consultation is Special Category Data under Article 9 of the UK GDPR. We collect it for one reason only, which is to treat you safely and appropriately. You will be asked for explicit consent on your consultation form before your first appointment, and you can withdraw that consent at any time.

4. How we use your personal data

• To book, confirm and manage your appointments.
• To send appointment reminders and follow up after treatment.
• To carry out treatments safely and appropriately.
• To answer your enquiries.
• To send marketing messages, but only if you have expressly asked to receive them.
• To meet our legal and insurance obligations.

5. Legal basis for processing

• Contract: processing needed to provide the appointment you have booked.
• Legitimate interests: sending appointment reminders, replying to enquiries, and essential technical processing needed to deliver, diagnose and protect the website.
• Explicit consent: health and consultation data, and any marketing messages.
• Consent: optional Google Analytics and its associated measurement cookies.
• Legal obligation: keeping records for as long as the law or our insurer requires.

6. How long we keep your data

• Treatment and consultation records: 7 years from your last appointment.
• Marketing consent records: until you withdraw consent, or 2 years from our last contact, whichever comes first.
• General enquiries and correspondence: 12 months.
• Essential hosting and security records: only for the operational or security period used by the hosting provider.

Google Analytics is not currently active. Before enabling it, we will publish the verified GA4 event-data retention setting here and ask visitors to make a fresh analytics choice.

7. Who we share your data with

We do not sell your personal data and we never will. We share it only with the services we need to run the business: website hosting and infrastructure providers, our online booking platform, our email and messaging providers, payment processors, and, where you consent, our website analytics provider. Each of these is required to protect your data to the standard the UK GDPR sets.

Google may process analytics information outside the UK. For international transfers, Google states that it uses the safeguards that apply to the transfer, including UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework and standard contractual clauses under its data protection terms. See Google's international transfer information.

8. Your rights under the UK GDPR

• Access: ask for a copy of the data we hold about you.
• Rectification: ask us to correct anything that is wrong.
• Erasure: ask us to delete your data, subject to records we are required to keep.
• Restriction: ask us to limit how we use your data.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to processing we carry out under legitimate interests.
• Withdraw consent: withdraw your consent at any time, including for health data and marketing.

To exercise any of these rights, email simplynude@protonmail.com. We will respond within one calendar month.

9. How to complain

If you are unhappy with how we have handled your data, please tell us first so we have the chance to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Cookies

This website uses necessary browser storage to remember your cookie choice. Optional Google Analytics cookies are used only when the integration is configured and you have actively accepted them. Our Cookie Policy explains exactly what is stored and when.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If a change affects how optional analytics uses your data, we will ask you to make a fresh choice rather than treating continued use as consent.

12. Contact

For any question about privacy or your data, email simplynude@protonmail.com or call 07498 444830.