Privacy Policy​

​

Last updated: 21 July 2026

​

Sarah Zacal Beauty respects your privacy and is committed to protecting your personal information.

This privacy policy explains what information is collected, why it is used, how it is stored and the rights you have under UK data-protection law.

Sarah Zacal Beauty is the data controller responsible for the personal information described in this policy.
 

1. Contact details

​

Sarah Zacal Beauty
5 Rollis Park Road
Plymstock
Plymouth
PL9 7LX

Email: sarahzacalbeauty@gmail.com
Telephone and WhatsApp: 07587 648 018
Website: www.sarahzacalbeauty.com

Please use these contact details if you have any questions about this privacy policy or how your information is handled.
 

2. The information collected
 

Depending on how you contact Sarah Zacal Beauty and which services you use, the following information may be collected:

• your name

• telephone number

• email address

• home address, where required

• appointment and booking details

• treatments purchased or received

• payment and transaction information

• messages sent by email, WhatsApp, Instagram or through the website

• consultation form answers

• patch-test records

• treatment notes

• relevant allergies, sensitivities, medical conditions or medication

• photographs, where you have agreed to them being taken

• marketing preferences

• technical information collected when you use the website, such as your device, browser, IP address and cookie information

Only information reasonably needed to provide treatments, manage appointments, meet legal responsibilities and operate the business will be collected.
 

3. How your information is collected
 

Personal information may be collected when you:

• book or change an appointment

• purchase a treatment, package or gift card

• complete a consultation or patch-test form

• contact Sarah Zacal Beauty by telephone, WhatsApp, email or Instagram

• visit or use the website

• accept or manage website cookies

• provide a review, testimonial or photograph

• enter a promotion or respond to an offer

​

Some booking and payment information may also be collected through third-party services used by Sarah Zacal Beauty, including SumUp and Wix.
 

4. Why your information is used
 

Your information may be used to:

• arrange and manage appointments

• provide the treatments you have requested

• contact you about a booking

• send appointment confirmations or reminders

• assess whether a treatment is suitable for you

• complete required consultation and patch-test records

• process payments, refunds and gift-card purchases

• respond to questions or complaints

• maintain appropriate treatment and business records

• meet insurance, accounting, tax, safety and legal requirements

• improve the website and customer experience

• send marketing messages where you have agreed to receive them

• protect the business and its clients against fraud or misuse

​

The ICO requires businesses to explain both the purpose for using personal information and the lawful basis relied upon for that use. (ICO)

5. Lawful bases for using your information

Sarah Zacal Beauty may rely on the following lawful bases.
 

Contract​

Your information is used where necessary to arrange, provide and take payment for a treatment or other service you have requested.

This may include:

• managing appointments

• communicating with you about your booking

• providing your treatment

• processing payments, cancellations or refunds

​

Some information may be used or retained where this is necessary to comply with legal responsibilities, including tax, accounting, insurance and regulatory requirements.

​

​

Legitimate interests​

Information may be used where there is a reasonable business need and your rights do not override that interest.

This may include:

• keeping appropriate business and treatment records

• responding to enquiries

• preventing fraud

• protecting legal rights

• improving services

• maintaining website security

​​

​

Consent​

Consent may be relied upon for:

• optional marketing messages

• non-essential website cookies

• using identifiable photographs for promotional purposes

• processing certain health-related information where explicit consent is appropriate

​

You can withdraw your consent at any time. Withdrawing consent will not affect processing that took place before it was withdrawn.

​

6. Health and treatment information

​

To provide treatments safely, Sarah Zacal Beauty may ask you to provide information about allergies, sensitivities, medical conditions, pregnancy, medication or previous reactions.

Health information is classed as special-category personal data and requires additional protection. Organisations processing it must identify both a lawful basis and an additional condition for processing special-category information. (ICO)

This information will only be collected where it is relevant to:

​

• deciding whether a treatment is suitable

• adapting a treatment safely

• recording patch-test results

• protecting your health and wellbeing

• meeting professional or insurance requirements

​

Where explicit consent is relied upon, you may withdraw that consent. However, Sarah Zacal Beauty may be unable to provide a treatment where the information is necessary to assess its safety.

Please provide accurate and up-to-date information before receiving a treatment.

7. Booking and payment providers

Sarah Zacal Beauty uses third-party services to help operate the website, appointment system and payment process.

These may include:

​​

​

Wix

The website is hosted and supported through Wix. Wix may process technical information and information submitted through website features.
 

​

SumUp​

The online booking system and certain payment services may be provided through SumUp. When you book or pay through SumUp, your information may also be processed under SumUp’s own privacy policy.

Sarah Zacal Beauty does not normally receive or retain your complete card details when payments are processed securely by a payment provider.

You should review the privacy information displayed by these providers when using their services.

​

8. Other organisations your information may be shared with

​

Personal information may be shared only where reasonably necessary with:

• website, booking and payment providers

• email and communications providers

• accountants or bookkeeping providers

• insurers

• professional advisers

• IT or website-support providers

• HM Revenue & Customs

• law-enforcement agencies, regulators or courts where legally required

​

Sarah Zacal Beauty does not sell your personal information.

Service providers are only given the information they need to perform their services.

​

9. International transfers

​

Some service providers, including website, booking, payment, analytics or communications providers, may store or process information outside the United Kingdom.

Where this happens, Sarah Zacal Beauty will rely on the safeguards used by the relevant provider, such as adequacy regulations or approved contractual protections, where required by data-protection law.

Further information about a provider’s international data transfers can be found in its own privacy policy.

​

10. How long information is retained

​

Personal information will not be kept for longer than reasonably necessary.

Retention periods depend on the type of information and why it was collected. The ICO’s storage-limitation principle states that personal data should not be retained when there is no longer a lawful reason to keep it. (ICO)

​

Sarah Zacal Beauty may normally retain:

• booking and customer communication records for as long as needed to manage the customer relationship

• treatment, consultation and patch-test records for the period required by the business’s insurer or professional obligations

• financial and transaction records for the period required by tax and accounting law

• consent records for as long as needed to demonstrate that valid consent was obtained

• marketing information until you unsubscribe or withdraw consent

• enquiry messages only for as long as reasonably needed to respond and deal with any follow-up

​

Information may be retained for longer where necessary to establish, exercise or defend a legal claim.

Before publishing: Sarah should confirm the precise retention period required by her treatment insurer for consultation and treatment records.

​

11. Photographs and testimonials

​

Sarah Zacal Beauty will ask for permission before using an identifiable client photograph or testimonial for promotional purposes.

​

Where consent has been given, content may be displayed on:

• the Sarah Zacal Beauty website

• Instagram or other social-media accounts

• printed promotional materials

• online business listings

​

You may withdraw your consent for future use by contacting Sarah Zacal Beauty.

It may not always be possible to remove content that has already been printed, shared by others or archived by an external platform, but reasonable steps will be taken to remove it from channels controlled by Sarah Zacal Beauty.

​

12. Marketing communications

​

Sarah Zacal Beauty may send information about appointments, treatments, availability or offers where you have agreed to receive marketing communications or where another lawful basis permits this.

​

You can stop receiving marketing messages at any time by:

• using an unsubscribe option where provided

• replying and asking to unsubscribe

• emailing sarahzacalbeauty@gmail.com

• messaging 07587 648 018

​

Service messages relating to an existing booking are not marketing messages and may still be sent when necessary.

​

13. Cookies

​

The website may use cookies and similar technologies.

Cookies are small files stored on your device that can help the website operate, remember settings, understand website use or support external features.

​

Cookies may include:

• strictly necessary cookies

• functionality cookies

• analytics cookies

• marketing or advertising cookies

​

Strictly necessary cookies may be used without consent where they are essential for the website to function.

Non-essential cookies should not be placed unless you have actively agreed to them. The ICO states that visitors must be told about cookies and that agreement is generally required for cookies that are not strictly necessary. (ICO)

You can manage your preferences through the website’s cookie banner and through your browser settings.

More information should be provided on the separate Cookie Policy page.

​

14. Keeping your information secure

​

Reasonable organisational and technical steps are taken to protect personal information against:

• unauthorised access

• accidental loss

• misuse

• alteration

• disclosure

• destruction

​

Access to client information is restricted to Sarah and any trusted service provider that reasonably requires access.

No online or electronic system is completely secure. However, reasonable care is taken when selecting and using website, booking, payment and communication providers.

​

15. Children’s information

​

Treatments for anyone under the age of 18 may require the involvement or consent of a parent or legal guardian, depending on the treatment, the client’s age and applicable salon or insurance requirements.

Where information about a child is collected, it will only be used to manage the enquiry, assess treatment suitability and provide the agreed service safely.

Sarah Zacal Beauty does not knowingly use children’s information for direct marketing without appropriate permission.

​

16. Your data-protection rights

​

Depending on the circumstances, you may have the right to:

• ask for a copy of your personal information

• ask for inaccurate information to be corrected

• ask for information to be deleted

• ask for the use of your information to be restricted

• object to certain uses of your information

• receive certain information in a portable format

• withdraw consent

• complain about how your information has been handled

​

These rights are not absolute and may depend on the lawful basis being used. The ICO confirms that the rights available can differ according to the relevant lawful basis. (ICO)

To exercise a right, contact:

Email: sarahzacalbeauty@gmail.com
Telephone: 07587 648 018

You may be asked to provide information needed to confirm your identity.

​

17. Complaints

​

Please contact Sarah Zacal Beauty first if you have concerns about how your information has been handled.
 

You also have the right to complain to the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

The ICO is the United Kingdom’s independent data-protection regulator. (ICO)
 

18. Links to external websites
 

The Sarah Zacal Beauty website may contain links to other websites, including SumUp, Instagram, WhatsApp and external booking or payment services.

Sarah Zacal Beauty is not responsible for the privacy practices or content of websites operated by other organisations.

Please read the privacy policy of the relevant provider before submitting information through an external website.
 

19. Changes to this privacy policy
 

This privacy policy may be updated when:

• business practices change

• new services or providers are introduced

• legal requirements change

• the website is updated

• ​

The latest version will be published on this page with its updated date.

​