Privacy Policy


PRIVACY POLICY

WEBSITE –

Who we are

Our website address is: http://lumiaspa.com.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

 

GENERAL POLICY

 

COLLECTION OF YOUR DATA

  • When you book an appointment with us (full name, telephone number)
  • When you arrive at your appointment and complete the client form (email details if you wish to receive offers, any health contraindications, allergies etc so we know whether or not we can carry out the treatment booked in).
  • When you purchase from our website or a transaction in house we may take payment details to process the transaction
  • When you purchase something from our website
  • When you sign up to newsletters via our website
  • When you enter competitions or enter surveys carried out by us

WHY DO WE COLLECT YOUR PERSONAL DATA?

  • We use the information we collect about you to process your bookings, ensure you are suitable for treatments, answer your queries, process your gift card purchases.
  • With your consent, we will contact you via our marketing and sales channels (email/ phone) about other related products and services we, or our group business, provide which we think may be of interest to you.  Our marketing communications are generally sent by email but we may sometimes use other methods of delivery such as by post or SMS.

STORING DATA

We store your personal data in our encrypted database(s) on a private server, SALON ENVISION SOFTWARE. Strictly limited to the amount of people who have access to. ALL PAPER FORMS ARE SHREDDED AFTER DETAILS HAVE BEEN ENTERED INTO DATABASE. We require all details to be updated on a regular basis normally every six months so everything is up to date including health. IPL forms and LipoFirm forms are stored away in a locked file base which only qualified therapists and management have access to.

YOUR RIGHTS

Right to revoke consent

If we process personal data on the basis of your consent, you have the legal right to revoke such consent at any time. We will then cease the relevant processing activity going forward.

Right of access to your information

If you want to know what personal data we have collected or process about you, you may request us to provide a copy of your personal data by sending an email to info@lumiaspa.com. We will ask you to identify yourself. We will not provide you with a copy of your personal data to the extent that the rights and freedoms of others are or may be adversely affected.

Right to rectification and erasure of data, and restriction of processing

If you believe that our processing of your personal data is incorrect, inaccurate, unlawful, excessive, incomplete, no longer relevant, or if you think that your data is stored longer than necessary, you may ask us to change or remove such personal data or restrict such processing activity, by sending an email to info@lumiaspa.com.

Right to data portability

You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format, in accordance with Article 20 of the General Data Protection Regulation.

COOKIES

The Website uses various cookies. We may track and record your use of our online services, either through cookies or via other means. Cookies enable us and others to monitor your browsing behaviour. Information generated by the use of cookies may constitute personal data. We may use the personal data collected in this manner for the purposes as stipulated in this Privacy Statement.

RETENTION OF INFORMATION

We will only retain your personal data for the period necessary to fulfil the purposes outlined in this Privacy Statement. This may be up to 4 years, unless a longer retention period is required or permitted by law (which is typically the case in the context of our obligations under tax law).

Should you choose to unsubscribe from our mailing list, please note that your personal data may still be retained on our database to the extent permitted by law.

GENERAL

We are committed to resolve any complaints about our collection or use of your personal data. In case you have any questions in relation to this Privacy Statement or our practices in relation to your personal data you may send an email to info@lumiaspa.com. We hope to resolve any complaint brought to our attention, however if you feel that your complaint has not been adequately resolved, you reserve the right to contact your local data protection supervisory authority, which for the UK, is the Information Commissioner’s Office.

We have done our best to make sure that this Privacy Statement explains the way in which we process your personal data, and rights you have in relation thereto. We may change this Privacy Statement from time to time to make sure it is still up to date and we will notify you if we make any material updates. We may also notify you in other ways from time to time about the processing of your personal information.