Privacy Policy

Last updated: 1 February 2026

Beauty Beam is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information when you visit our website or use our services.

1. Who We Are

Beauty Beam is a laser treatment specialist offering laser hair removal and laser tattoo removal and laser skin rejuvenation in the UK.
We are the data controller for your personal information.

Business Name: Beauty Beam
Email: beautybeamlaser@gmail.com
Phone: 07375954163
Address: 22 Whitehouse Road, Billingham, England TS22 5ES

2. Information We Collect

We may collect the following types of personal data when you use our services or website:

Contact details: name, email address, phone number, postal address
Medical history and treatment records: relevant to your laser treatments
Appointment details: bookings, dates, treatment notes
Payment information: card details (processed securely via our payment provider)
Website usage data: IP address, browser type, pages visited (via cookies and analytics)
Consent records: your signed treatment consent forms

3. How We Use Your Information

We process your information to:

Provide laser hair removal and tattoo removal services
Assess suitability for treatments and ensure client safety
Maintain accurate treatment and medical records
Manage bookings, payments, and client communications
Send appointment reminders and aftercare information
Comply with legal and regulatory obligations

We will only process your personal data when we have a lawful basis to do so, such as your consent, a contract, or a legal requirement.

4. Sharing Your Information

We will never sell your data. We may share information with:

Medical professionals, if required for your safety
Regulators or legal authorities, where required by law
Service providers (e.g., booking systems, payment processors, secure cloud storage)

All third-party providers are GDPR-compliant and only process your data for agreed purposes.

5. Data Storage and Security

Your data is stored securely in encrypted electronic systems.
Paper records (if any) are kept in locked cabinets.
We retain medical and treatment records for 7 years (as required by UK regulations) before securely destroying them.

6. Your Rights

Under the UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data (where legally permissible)
Restrict or object to processing
Data portability
Withdraw consent at any time (this will not affect the lawfulness of processing before withdrawal)

To exercise these rights, please contact us using the details above.

7. Cookies

Our website uses cookies to improve your browsing experience and analyse website performance.
You can change your cookie settings at any time via your browser.

8. Links to Other Websites

Our website may contain links to other websites. We are not responsible for their privacy practices and recommend you read their policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with the revised date.

10. Contact Us

If you have any questions or concerns about how we handle your personal data, please contact:

Email: beautybeamlaser@gmail.com
Phone: 07373954163
Address: 22 Whitehouse Road, Billingham, England TS22 5ES

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Appendix 1 Data Breach Response Plan – Beauty Beam

Purpose:

To ensure a swift, responsible, and compliant response to any data breach involving personal or special category data.

1. What is a Personal Data Breach?

Includes loss/theft of data, unauthorised access, accidental deletion, malware, or sending data to the wrong person.

2. Detection

Breaches may be identified via:

- Suspicious activity on website

- Wix or payment system alerts

- Client reports

- Internal reporting

3. Containment and Assessment (within 24 hours)

- Secure affected systems

- Identify compromised data and affected individuals

- Assess risk to individuals’ rights, especially with medical data

4. Notification (within 72 hours)

- Notify the ICO if required (https://ico.org.uk)

- Notify individuals if there's a high risk (especially medical/payment info)

- Communicate what happened, data affected, our response, and contact info

5. Documentation and Review

- Record details of the breach: what, when, who, how

- Review and update policies or training to prevent recurrence