Who we are
This privacy notice applies to Luxe Laser (“we”, “us”, “our”), operating the website luxelaser.co.uk. We are the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact Details:
- Business Name: Luxe Laser
- Address: 57 Hambledon Mill Park, Accrington, BB5 5FQ
- Telephone: 07383596090
- Email: info@luxelaser.co.uk
We provide laser and aesthetic treatments including tattoo removal, laser hair removal, skin rejuvenation, and related aesthetic services.
WHAT DATA WE COLLECT
We collect and process:
Personal Data
- Full name, email address, telephone number
- Billing/payment details — never stored in full; processed securely via payment provider
- Date of birth/age verification
- Address details
- Any information provided in booking forms, contact forms, emails, or consultations
Special Category Data (Health Information)
Because we provide clinical aesthetic treatments, we also collect health and medical information — skin type, medical history, allergies, previous treatments, contraindications, and clinical photographs for treatment records. This is “special category data” under UK GDPR and receives enhanced protection.
Automatically Collected Data
Cookies — see separate Cookie Policy above
IP address, browser type, device information
Pages visited, time on site, referring URLs
HOW WE COLLECT YOUR DATA
Directly from you: booking forms, contact forms, emails, telephone, in-clinic consultations
Automatically: website analytics and cookies
Third parties: booking platforms, payment processors — only where lawfully permitted
WHY WE PROCESS YOUR DATA & LEGAL BASIS
| Purpose | Legal Basis |
|---|---|
| Process bookings, deliver treatments, manage client records | Performance of a contract / pre-contractual steps |
| Health & safety assessment, treatment eligibility, care planning | Medical necessity / substantial public interest / explicit consent |
| Respond to enquiries & provide customer support | Legitimate interests & consent |
| Send appointment reminders & service updates | Legitimate interests/consent |
| Marketing communications | Consent — opt out anytime |
| Comply with tax, accounting, health & safety, and legal obligations | Legal obligation |
| Website security, functionality improvement & analytics | Legitimate interests/consent (non-essential cookies) |
WHO WE SHARE YOUR DATA WITH
Payment processors — to handle transactions securely
Clinical record software — encrypted, access-controlled platforms
Booking/scheduling platforms — only as required to manage appointments
Regulatory authorities — if legally required
We never sell, rent, or trade your personal data
Data is not transferred outside the UK unless equivalent protection standards apply
DATA RETENTION PERIODS
| Data Category | Retention Period |
|---|---|
| Client treatment & health records | 10 years following your last appointment |
| Booking, financial & tax records | 7 years as required by HMRC guidelines |
| Marketing preferences | Until consent is withdrawn or 3 years of inactivity |
| Website analytics data | 26 months |
| Contact/enquiry records | 3 years if unbooked; merged with client file once active |
| Expired records | Securely destroyed or permanently de-identified |
YOUR RIGHTS
Under UK data protection law, you have the right to:
- Access — obtain a copy of all personal data we hold about you
- Rectification — correct inaccurate or incomplete details
- Erasure — request deletion, subject to legal retention duties
- Restriction — limit how your data is processed
- Data Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests or direct marketing
- Withdraw Consent — at any time; this does not affect processing already carried out
- Complain — to the ICO (ico.org.uk) if you believe we have handled your data unlawfully
Submit requests to info@luxelaser.co.uk. We respond within one calendar month.
CHILDREN & MINORS
Our services are intended for persons aged 18 and over. If under 18, written parental/guardian consent is required before any treatment or data collection. We do not knowingly collect data from anyone under 16 without verified consent.
DATA SECURITY
We use end-to-end encryption, secure servers, limited staff access, and regular security reviews to protect your information. However, no internet transmission method is entirely secure, and we cannot guarantee absolute security.
CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. Changes apply from the “Last Updated” date shown. Significant changes will be notified via our website homepage.
CONTACT US
For privacy enquiries or to exercise your rights:
📧 info@luxelaser.co.uk
📞 07383596090
📍 57 Hambledon Mill Park, Accrington, BB5 5FQ