Last updated: 01:00, Wednesday 11th September 2019
Pixie Face Aesthetics (‘we’, ‘our’ and ‘us’) is the controller and responsible for your personal data.
As part of our business, we may process information about you.
We respect your privacy and are committed to protecting and treating your personal data in compliance with all applicable data protection regulations, in particular the General Data Protection Regulation (“GDPR”) and the Regulations (collectively referred to as “the Regulations”).
By using our services, you agree to be bound by this privacy policy and that we proceed to the processing of personal data on the terms outlined below.
This privacy policy aims to inform you as to how we collect and process your personal data when you visit the Site (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
The Site is not intended for children and we do not knowingly collect data relating to children.
This privacy policy (as well as our cookie policy, the terms and conditions for our supply of services and any other agreement to which these documents could refer), together the “Documents”, details the way we treat your personal data.
It is important that you read the Documents together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.
We have appointed a data protection officer (“DPO”) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below.
If you have any questions about this privacy policy or our privacy practices, please contact our DPO in the following ways:
You have the right to make a complaint at any time to the competent supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the competent supervisory authority for data protection issues, so please contact us in the first instance.
We keep our privacy policy under regular review and we reserve the right to change this privacy policy at any time without notice.
When necessary, we will notify you by email of any changes to this privacy policy.
We invite you to regularly review this privacy policy available on our Site, to learn about any changes. Historic versions of our privacy policy can be obtained by contacting us.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
The Site may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave the Site, we encourage you to read the privacy policy of every website you visit.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data) and cannot be restored not even by combining the anonymised data with other data.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
We may collect information about your health only on your explicit consent. When you give your explicit consent to our collection of such information, we would limit access to such information to our employees, agents, contractors who have a business need to know.
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services). In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.
We use different methods to collect data from and about you including through:
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
We have set out below, in a table format, a description of the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
| Purpose/Activity | Type of data | Lawful basis for processing |
|---|---|---|
| To register you as a new customer | (a) Identity (b) Contact | Performance of a contract with you |
| To process and deliver your order, including managing payments | (a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing & Comms | (a) Performance of a contract with you (b) Legitimate interests (to recover debts) |
| To manage our relationship with you (notifying changes, surveys, reviews) | (a) Identity (b) Contact (c) Profile (d) Marketing & Comms | (a) Performance of a contract (b) Comply with legal obligation (c) Legitimate interests (update records) |
| To administer and protect our business and the Site | (a) Identity (b) Contact (c) Technical | (a) Legitimate interests (running business, IT services, security) (b) Legal obligation |
| To use data analytics to improve Site, services, and marketing | (a) Technical (b) Usage | Legitimate interests (to keep Site updated and define types of customers) |
Our use of your data for marketing purposes is based on your express and specific consent in accordance with Art. 6 (1) 1 a) GDPR. However, email marketing will not require your consent if you are already one of our clients and it relates to similar services we provided in the past, provided you have not opted out.
We use cookies only if they are necessary for the proper functioning of our services or if you give your explicit consent. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. For more details, see our cookie policy.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
Your personal data are processed mainly within the UK and the European Economic Area (“EEA”). Whenever exchanges require cross-border transfers outside the UK and the EEA, we ensure a similar degree of protection is afforded by ensuring standard safeguards or adequacy decisions are implemented.
We implement appropriate technical and organisational measures, including physical solutions, hardware and software, in order to preserve the security, integrity and confidentiality of your personal data and protect against unauthorised access, use, alteration, disclosure or destruction.
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including satisfying any legal, regulatory, accounting or reporting requirements. Data relating to customer management is generally kept for up to three (3) years after the termination of our commercial relationship.
You have the right to request access, correction, erasure, restriction, or transfer of your personal data, to object to processing, or to withdraw consent. If you wish to exercise any of these rights, please contact us.