Privacy Policy

This Privacy Policy explains how Scalp n’ Body Emporium (“we”, “us”, “our”) collects, uses and protects your personal information when you contact us, book or receive a treatment, or use our websites. It applies to the Scalp n’ Body Emporium and the businesses within it: SMP Emporium, Nails & Beauty Emporium, and Sports Therapy & Performance.

We are committed to protecting your privacy and handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Scalp n’ Body Emporium is a family-run business based at Room GW3, William Garfit Walk, 116 High Street, Boston, Lincolnshire, PE21 8TG. For the purposes of data protection law, we are the “data controller” responsible for your personal information.

If you have any questions about this policy or your data, you can contact us at info@scalpnbodyemporium.co.uk or on 07485 764833.

2. Information we collect

Depending on how you interact with us, we may collect:

• Contact details — your name, phone number, email address and any messages you send us (for example by WhatsApp, email, phone or social media).
• Booking information — the treatments you book, appointment dates and times, and your preferences.
• Health and consultation information — where relevant to your treatment (for example sports therapy, massage, SMP or beauty treatments), we may record health details, medical history, consultation notes and consent forms. This is “special category” data and is handled with extra care (see section 5).
• Payment information — records of payments made. Card payments are handled securely by our payment providers; we do not store full card details.
• Website information — basic technical data and cookies when you use our websites (see section 9).

3. How we use your information

We use your information to:

• Respond to your enquiries and provide the treatments and services you request;
• Manage your bookings, appointments and aftercare;
• Keep accurate treatment and consultation records for your safety and ours;
• Take payment and keep business and accounting records;
• Contact you about your appointments; and
• Send you offers or updates, only where you have asked us to or otherwise agreed.

4. Our lawful basis for using your information

We rely on one or more of the following lawful bases under UK GDPR:

• Contract — to provide the treatment or service you have booked;
• Consent — for example where you agree to receive marketing, or where you provide health information for a treatment;
• Legitimate interests — to run and improve our business in ways you would reasonably expect and which do not override your rights; and
• Legal obligation — where we must keep certain records (for example for tax or insurance).

5. Health information

Some of our treatments require us to collect health information so we can treat you safely. Where we collect this special category data, we do so on the basis of your explicit consent, and/or because it is necessary for the provision of health treatment. We only collect what we need, and we keep it confidential and secure.

6. Sharing your information

We do not sell your personal information. We only share it where necessary, for example with:

• Trusted service providers who help us run our business (such as payment processors, booking or IT providers), who are required to protect your data;
• Professional, regulatory or insurance bodies where required; and
• Law enforcement or other authorities where we are legally required to do so.

7. How long we keep your information

We keep your information only for as long as necessary for the purposes set out above. Treatment and consultation records may be kept for longer where professional standards, insurance or the law require it. When information is no longer needed, we securely delete or destroy it.

8. Keeping your information secure

We take appropriate measures to keep your information safe and to prevent unauthorised access, loss or misuse. Access to personal and health information is limited to those who need it to provide your care.

9. Cookies & our websites

Our websites may use cookies and similar technologies to help them work properly and to understand how they are used. You can control cookies through your browser settings. Our websites may also link to third-party sites (such as social media or booking platforms) that have their own privacy policies, which we do not control.

10. Your rights

You have rights over your personal information, including the right to access, correct, delete or restrict its use, and to object or withdraw consent. You can read more about these rights and how to exercise them on our GDPR & your data rights page.

11. Children

Where we provide treatments to anyone under 18, we do so with the consent and, where appropriate, the presence of a parent or guardian. We do not knowingly collect information from children in any other context.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date it was last updated.

13. Contact & complaints

If you have a question, a request about your data, or a concern about how we have handled it, please contact us at info@scalpnbodyemporium.co.uk or on 07485 764833.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.