WOB Beauty Ltd
Privacy policy
How we look after your personal information, and the choices you have.
This notice explains how WOB Beauty Ltd collects, uses and protects your personal information when you visit our website, book or receive a treatment, train with our academy, buy a product or get in touch with us. We handle your information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
WOB Beauty Ltd, trading as WOB Beauty (Wardrobe of Beauty), is the controller of your personal information. This means we decide how and why it is used.
- Registered in England and Wales, company number 12928320
- Registered office: Audley House, 13 Palace Street, London SW1E 5HX
- Studio: 7 Hind Court, 147 Fleet Street, London EC4A 2BU
- Email: info@wobbeauty.com
- Telephone: 07586 046594
Please contact us at any of the above with a question about your information or to use any of your rights.
2. The information we collect
| Type of information | Examples | Where it comes from |
|---|---|---|
| Contact and identity details | Name, email address, telephone number, postal address, date of birth | You, when you book, enquire, train with us or buy from us |
| Booking and payment details | Appointments, services chosen, deposits paid, payment references | You, our booking system and our payment provider. We never see or store your full card number. |
| Health and consultation information | Medical history, medications, allergies, skin type, patch test results, treatment notes and signed consent forms | You, at consultation, and our practitioner during your treatment |
| Photographs | Before and after photographs of the treated area | Our practitioner, only with your permission |
| Messages | Emails, texts, WhatsApp, Instagram and Facebook messages, call records and voicemail | You, when you contact us |
| Advertising enquiries | Name, email and phone number you submit through a Facebook or Instagram lead form | Meta, when you choose to send us the form |
| Academy information | Qualifications, attendance, assessments and certificates | You and our trainer |
| Website use | Pages visited, device and browser type, approximate location, how you arrived at our site | Cookies and similar technologies, only if you allow them (see our cookie policy) |
3. How we use your information and our lawful basis
Data protection law requires us to have a lawful basis for each way we use your information.
| Purpose | Lawful basis |
|---|---|
| Taking and managing bookings, deposits, reminders and your treatment | Contract: we need it to provide the service you have asked for |
| Assessing whether a treatment is safe and suitable for you, and keeping treatment records | Contract, and your explicit consent for health information (see section 4) |
| Answering your enquiries and messages | Legitimate interests: responding to people who contact us, or steps you ask us to take before booking |
| Running academy courses and issuing certificates | Contract |
| Keeping accounts and meeting tax, insurance and legal duties | Legal obligation, and legitimate interests in defending claims |
| Sending offers and news to past clients about similar treatments | Legitimate interests, under the PECR “soft opt-in”. You can opt out at any time. |
| Sending offers and news to anyone else | Consent |
| Using before and after photographs on our website or social media | Consent, given separately and in writing |
| Website analytics, advertising measurement and showing adverts to past visitors | Consent, through our cookie banner |
| Keeping our website and systems secure | Legitimate interests |
4. Your health information
Information about your health is special category data and deserves extra care. We ask for it only so that we can decide, together with you, whether a treatment is safe and suitable, and so that we can treat you properly and look after you afterwards.
We rely on your explicit consent, which you give when you complete and sign your consultation and consent form. You may withdraw that consent at any time. If you do, we will not be able to carry out treatments that depend on it, and we will still keep the records we already hold for as long as section 10 explains, because our insurers and the law expect it.
We never mention a skin condition or the details of your treatment in a text message or marketing message.
5. Marketing
If you have been a client, we may send you occasional news and offers about treatments similar to those you have had. Anyone else hears from us only if they have agreed to it. Every marketing email and text tells you how to stop receiving them. You can also reply STOP, email info@wobbeauty.com or tell us in person. Messages about an appointment you have booked are not marketing and will continue.
6. Our website, cookies and advertising
When you first visit our website we ask whether you are happy for us to use optional cookies. If you say no, nothing optional is loaded. If you say yes:
- Google Analytics (Google Ireland Ltd) helps us understand, in aggregate, how our website is used.
- The Meta pixel (Meta Platforms Ireland Ltd) tells us whether our Facebook and Instagram adverts lead to enquiries and bookings, and lets us show our adverts to people who have visited our website. For collecting and sending this information to Meta, WOB Beauty and Meta are joint controllers. Meta explains how it then uses the information in its privacy policy, where you can also manage your advert preferences. We only send standard events such as a page view, a contact or a completed booking. We never send your name, contact details or health information through the pixel.
- Google Maps shows our location. Google may set its own cookies once the map loads.
You can change your choice at any time using Cookie settings at the foot of every page. Our cookie policy lists every cookie in detail.
If you reply to one of our adverts using a Facebook or Instagram lead form, Meta passes us the details you chose to submit so that we can answer your enquiry.
7. Messages and our assistant
Messages sent to us by text, web chat, email, Instagram or Facebook may first be answered by our assistant, Liz, which uses automated software to reply to common questions and arrange a call back. Bola and the WOB Beauty team read the conversations and make every decision about your treatment, your booking and your suitability. We do not make any decision about you that has a legal or similarly significant effect using automated means alone.
8. Who we share your information with
We do not sell or rent your personal information. We share it only where necessary with:
- HighLevel Inc. (LeadConnector), our booking, client records and messaging system
- Stripe, which processes deposit payments made online
- Google, for website analytics (only with your consent), location maps and business tools
- Meta (Facebook, Instagram and WhatsApp), when you message us there, send us a lead form, or allow marketing cookies
- Cloudflare, which hosts and protects our website
- Our accountant, insurers and professional advisers
- The police, regulators, courts or other authorities, where the law requires it
Our service providers may only use your information on our instructions and must keep it secure.
9. International transfers
Some of our providers, including HighLevel, Stripe, Google and Meta, store or access information in the United States or elsewhere outside the UK. Where they do, the transfer is protected by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by the UK International Data Transfer Agreement or Addendum. Contact us for more detail.
10. How long we keep your information
| Information | How long |
|---|---|
| Client records, consultation and consent forms, treatment notes | 7 years after your last treatment, as our insurers require |
| Payment, invoice and accounting records | 6 years after the end of the financial year they relate to |
| Academy records and certificates | 6 years after the course ends |
| Enquiries that do not lead to a booking | 2 years after our last contact |
| Marketing details | Until you opt out. We then keep a minimal record so that we do not contact you again. |
| Photographs used with consent | Until you withdraw consent, when we remove them from our website and social media |
| Website analytics | 14 months in Google Analytics |
11. How we protect your information
We use password-protected, access-controlled systems, limit access to people who need it, and keep paper consultation forms locked away. No system is perfectly secure, but we take reasonable steps to prevent loss, misuse and unauthorised access, and we will tell you and the Information Commissioner's Office if a breach puts you at risk.
12. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information, where we have no legal reason to keep it
- ask us to restrict how we use your information
- object to our use of your information based on legitimate interests, and to marketing at any time
- ask for information you gave us to be sent to you or another organisation in a reusable format
- withdraw your consent at any time, where we rely on it
To use any of these rights, email info@wobbeauty.com. There is no charge, and we will reply within one month. We may need to confirm your identity first.
13. Complaints
If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection: ico.org.uk/make-a-complaint or 0303 123 1113.
14. Children
Our website and services are intended for adults. We do not knowingly collect information from children through our website.
15. Other websites
Our website links to other websites, such as Instagram, Facebook, TikTok, YouTube and WhatsApp. Their own privacy notices apply when you use them.
16. Changes to this notice
We will update this notice when our practices or the law change. The date at the top shows when it was last revised. If a change affects you significantly, we will let you know.