Privacy Policy

About Lumi By Luci

Lumi By Luci is an aesthetics and skincare business based in Kings Langley, Hertfordshire.

For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Lumi By Luci is responsible for the personal information we process.

Information We Collect

We may collect information that you provide to us when you:

• Visit or use our website
• Make an appointment
• Complete a consultation or consent form
• Contact us by email, telephone, social media or another method
• Purchase or receive a treatment
• Provide feedback or contact us regarding a previous appointment

Depending on the circumstances, the information we collect may include:

• Full name
• Date of birth or age
• Telephone number
• Email address
• Address, where required
• Appointment and booking details

Health and Treatment Information

To ensure treatments are suitable and can be provided safely, we may collect relevant information such as:

• Medical history
• Allergies
• Skin conditions and concerns
• Current medication
• Previous treatments
• Relevant health information
• Contraindications
• Treatment records
• Consultation information
• Consent information
• Before and after photographs

Some of this information may be considered special category health data under UK data protection law. We only collect and use information that is relevant to providing our services and ensuring your treatment is appropriate and safe.

Payments and Website Information

Payments may be processed through third-party payment providers. We do not normally have access to or store your full payment card details.

When you visit our website, certain information may be collected automatically, including your IP address, device type, browser type and information about how you use our website.

How We Use Your Information

We may use your information to:

• Manage and confirm appointments
• Send appointment reminders and updates
• Provide treatments and services
• Complete consultations
• Assess treatment suitability
• Maintain treatment records
• Communicate with you about your appointment
• Respond to enquiries
• Process payments
• Manage cancellations and rescheduling
• Provide customer service
• Improve our treatments, services and website
• Maintain appropriate business records
• Prevent fraud or misuse
• Comply with legal and regulatory obligations
• Deal with complaints or disputes

Where you have given appropriate consent, we may also use your information for marketing purposes, including sending information about Lumi By Luci treatments, promotions, availability and offers.

Lawful Basis for Processing

We will only process your personal information where we have a lawful basis to do so.

Depending on the circumstances, this may include:

• Contract: where processing your information is necessary to arrange or provide a treatment or service you have requested.
• Legitimate interests: where processing is necessary for the reasonable operation and administration of Lumi By Luci.
• Legal obligation: where we are required to process or retain information to comply with a legal requirement.
• Consent: where you have specifically given us permission to use your information for a particular purpose, such as certain marketing activities or the use of photographs.

Where we process health information or other special category information, we will also rely on an appropriate condition under UK data protection law.

Photography

We may take photographs before or after a treatment where they are useful for documenting treatment results or maintaining your treatment records.

Photographs will not be used for marketing purposes without appropriate permission.

If you agree to your photographs being used for marketing, they may appear on platforms such as our website or social media accounts.

You are not required to agree to marketing use of your photographs in order to receive a treatment.

You may withdraw your permission for future marketing use at any time by contacting us.

Third-Party Providers

We may use trusted third-party providers to help us operate our business and provide our services.

These may include providers used for:

• Online bookings and appointment management
• Consultation and consent forms
• Payment processing
• Website hosting
• Email and communication
• Website analytics
• Marketing and social media
• Business administration

For example, Lumi By Luci may use Setmore for appointment bookings and Faces for consultation and consent forms.

These providers may process personal information on our behalf or process information in accordance with their own privacy policies.

We only share information that is reasonably necessary for the relevant service or purpose.

International Transfers

Some third-party providers may store or process information outside the United Kingdom.

Where personal information is transferred outside the UK, appropriate safeguards will be used where required by applicable data protection law.

How We Protect Your Information

We take reasonable steps to protect your personal information against:

• Unauthorised access
• Loss
• Misuse
• Accidental destruction
• Unauthorised disclosure
• Unauthorised alteration

We limit access to personal information where reasonably possible.

However, no method of electronic storage or transmission over the internet can be guaranteed to be completely secure.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

Certain information may need to be retained for longer where this is necessary for:

• Legal or regulatory requirements
• Treatment records
• Insurance purposes
• Accounting and financial records
• Resolving complaints or disputes
• Establishing or defending legal claims

When information is no longer required, it will be securely deleted or destroyed where reasonably practicable.

Marketing Communications

We may occasionally send marketing communications about Lumi By Luci, including:

• New treatments
• Promotions
• Offers
• Availability
• Business updates

Where consent is required, we will obtain your consent before sending marketing communications.

You can unsubscribe from marketing communications at any time.

Withdrawing marketing consent will not affect any treatment or service you receive from us.

Cookies

Our website may use cookies and similar technologies.

Cookies may be used to:

• Make the website function correctly
• Remember preferences
• Understand how visitors use the website
• Improve website performance
• Provide website analytics
• Support certain website features

Where required, we will request your consent before placing non-essential cookies on your device.

You can also manage cookies through your browser settings.

Your Data Protection Rights

Under UK data protection law, you may have the right to:

• Request access to the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information in certain circumstances
• Ask us to restrict how we use your information in certain circumstances
• Object to certain types of processing
• Request a copy of certain information in a portable format
• Withdraw consent where we rely on consent
• Make a complaint about how we process your information

These rights are subject to certain legal conditions and exemptions.

If you would like to exercise any of your rights, please contact us using the details below.

Children’s Information

Our services are primarily intended for adults.

We do not knowingly collect personal information from children without appropriate parental or guardian involvement where this is required.

Links to Third-Party Websites

Our website may contain links to third-party websites, including booking platforms and social media platforms.

We are not responsible for the privacy practices, content or security of third-party websites.

We recommend reading the privacy policy of any third-party website before providing your personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or legal requirements.

The most recent version will be published on this page and the date at the top of the policy will be updated accordingly.