Privacy Policy

Last updated: October 2026

At Judy’s Spa, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it and the choices you have regarding your information.

Who We Are

Judy’s Spa provides massage, body scrub, waxing and related beauty and wellbeing treatments.

Business name: Judy’s Spa
Address: [Business address]
Email: [Business email]
Telephone: [Business telephone number]

For data protection purposes, Judy’s Spa is responsible for the personal information we collect and use.

Information We May Collect

When you contact us, book an appointment, visit our website or receive a treatment, we may collect information including your:

  • name;

  • telephone number;

  • email address, where provided;

  • appointment details;

  • treatment preferences;

  • messages or enquiries;

  • booking history; and

  • information you voluntarily provide that is relevant to providing your treatment safely.

We aim to collect only the information reasonably necessary to provide our services.

Health and Treatment Information

For some treatments, we may ask whether you have allergies, sensitivities, medical conditions, medications, pregnancy or other information that could affect the suitability or safety of a treatment.

Where health information is requested, we will only use it where necessary for your treatment and in accordance with applicable data protection requirements. Where required, we will ask for your explicit consent to use this information.

How We Use Your Information

We may use your personal information to:

  • arrange, manage and confirm appointments;

  • communicate with you about your booking;

  • respond to questions and enquiries;

  • provide treatments safely and appropriately;

  • maintain appropriate client and appointment records;

  • manage cancellations or changes to appointments;

  • improve our services and customer experience;

  • meet legal, accounting or regulatory requirements; and

  • send promotional messages where you have agreed to receive them.

Our Lawful Basis for Using Your Information

Depending on why we are using your information, we may rely on different lawful bases.

We may process information because it is necessary to take steps at your request or provide a service you have booked with us.

We may also process certain information where we have a legitimate business reason to do so, provided your rights and interests are appropriately considered.

Where consent is required, including certain marketing activities or the use of sensitive information, we will ask for your consent. You may withdraw consent at any time.

Marketing and Promotions

Providing an email address for promotional messages is optional.

You will still be able to enquire about or book our services if you choose not to receive marketing communications.

Where you choose to subscribe, we may send you information about:

  • special offers;

  • promotions;

  • new treatments;

  • seasonal offers; and

  • news from Judy’s Spa.

You may unsubscribe at any time using the unsubscribe option provided in our messages or by contacting us directly.

Booking Through WhatsApp or Other Services

If you contact or book with us through WhatsApp, social media or another third-party platform, that provider may process information according to its own privacy policy.

We recommend reviewing the privacy settings and policies of any third-party service you use.

Website and Booking Providers

Our website, appointment scheduling, communications or other business functions may be supported by third-party providers such as Squarespace, Acuity Scheduling, email services, analytics providers or similar business tools.

These providers may process information on our behalf where necessary to provide their services.

We only intend to use reputable providers and will take reasonable steps to ensure personal information is handled appropriately.

Cookies

Our website may use cookies and similar technologies to operate correctly, understand website usage and improve visitors’ experience.

Where consent is legally required for non-essential cookies, you will be given the opportunity to accept or reject them.

You can also manage cookies through your browser settings.

How Long We Keep Your Information

We keep personal information only for as long as it is reasonably required for the purpose for which it was collected, including providing services, maintaining necessary business records and meeting legal requirements.

Marketing information will be retained until you unsubscribe or otherwise withdraw your consent, subject to any limited records we may need to retain to respect your preference not to receive further marketing.

Sharing Your Information

We do not sell your personal information.

We may share information where reasonably necessary with trusted service providers that help us operate our website, booking system, communications or business administration.

We may also disclose information where required by law.

Keeping Your Information Secure

We take reasonable organisational and technical measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

However, no internet-based system can guarantee complete security.

Your Data Protection Rights

Depending on the circumstances, you may have rights relating to your personal information, including the right to:

  • request access to information we hold about you;

  • ask us to correct inaccurate information;

  • request deletion of certain information;

  • restrict or object to certain uses of your information;

  • withdraw consent where we rely on consent; and

  • request certain information in a portable format where applicable.

You also have an absolute right to object to your personal information being used for direct marketing.

To exercise your rights, contact us using the details above.

Complaints

If you have concerns about how Judy’s Spa handles your personal information, please contact us first so that we have an opportunity to address the issue.

You also have the right to raise a concern with the UK Information Commissioner’s Office (ICO).

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, business practices or legal requirements.

The latest version will always be available on our website.