Privacy Notice

Nubiabeautyy is a beauty therapy studio based at Studio 34, 19 Pages Walk, London SE1 4SB.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, is the data controller for your personal information. This means we are responsible for deciding how your data is collected, stored, and used.

Trading name - Nubiabeautyy

Address - Studio 34, 19 Pages Walk, London SE1 4SB

Email - admin@nubiabeautyy.com

Phone - +44 7851 178156

Website - www.nubiabeautyy.com

We only collect personal information that is necessary for the purposes described in this policy. The types of information we may collect are set out below.

When you book an appointment

• Your name and contact details (email address, phone number).

• Appointment preferences and any notes you provide at the time of booking.

• Health and skin information relevant to your treatment (for example, skin conditions, allergies, contraindications, or patch test results).

• Payment information — processed securely through our payment providers (Acuity Scheduling, GoCardless, or Square, depending on the payment method used). Nubiabeautyy does not store your full card or bank account details directly.

When you purchase from our shop

• Your name, email address, and delivery address.

• Payment details — processed securely through Squarespace Commerce; Nubiabeautyy does not store card numbers.

• Your order history.

When you subscribe to our mailing list

• Your name and email address.

When you visit our website

• Technical data such as your IP address, browser type, pages visited, and time spent on the site — collected automatically by Squarespace.

• Cookie data — please see Section 8 of this policy for full details.

When you contact us directly

• Your name, contact details, and the content of your message (whether by email, phone, or social media direct message).

We do not collect sensitive personal data (such as information about your health) beyond what is directly required to provide your treatments safely. Where we do collect health-related information, we do so on the basis of your explicit consent.

Under UK GDPR, we must have a lawful basis for processing your personal data. The table below explains why we collect each type of information and the legal basis we rely on.

Booking and managing your appointments

• Name, contact details, health/skin information

• Contract; Explicit consent (health data)

Processing your shop orders

• Name, address, email, order history

• Contract

Processing payments

• Payment details (handled by Acuity/Squarespace, GoCardless, or Square depending on payment method)

• Contract

Sending you appointment reminders and follow-up messages

• Name, email, phone

• Contract / Legitimate interests

Sending marketing emails (only with your consent)

• Name, email address

• Consent

Responding to your enquiries

• Name, contact details, message content

• Legitimate interests

Improving our website and understanding how visitors use it

• Technical / cookie data

• Consent (non-essential cookies); Legitimate interests (analytics)

Complying with legal and regulatory obligations

• Any data required by law

• Legal obligation

We will only send you marketing emails if you have given us your explicit consent to do so — for example, by subscribing to our mailing list on the website.

You can withdraw your consent and unsubscribe from our mailing list at any time by:

• Clicking the unsubscribe link in any marketing email we send you

• Emailing us at admin@nubiabeautyy.com and asking to be removed

Withdrawing your consent does not affect the lawfulness of any processing carried out before you withdrew it. We will action all unsubscribe requests within a month.

We do not send marketing messages by text or phone without your prior consent, and we never sell or share your contact details with third parties for marketing purposes.

We do not sell your personal data. We only share your information with third parties where it is necessary to provide our services to you, or where we are required to do so by law.

The third-party services we use are listed below, along with a brief description of what data they receive and why.

Acuity Scheduling (Squarespace)

Our primary appointment booking platform. Stores your booking details, contact information, appointment history, and any intake form responses. Processes card payments via Stripe on our behalf. Privacy policy: squarespace.com/privacy

Squarespace

Our website and online shop platform. Processes shop orders, stores order history, and collects standard website analytics. Privacy policy: squarespace.com/privacy

Squarespace Email Campaigns

Used to send marketing emails to subscribers. Stores your name and email address if you have opted in. Privacy policy: squarespace.com/privacy

Stripe (via Acuity / Squarespace)

Processes card payments securely on behalf of Acuity and Squarespace. Nubiabeautyy does not receive or store your full card details. Privacy policy: stripe.com/gb/privacy

GoCardless

Used occasionally to process Direct Debit payments. Important: GoCardless operates as an independent data controller — not solely as our processor. This means GoCardless holds your bank account details and name under its own legal obligations and privacy policy, separately from Nubiabeautyy. You can review GoCardless's privacy notice at gocardless.com/legal/privacy

Square

Used occasionally for in-person card payments. Square processes payment data on our behalf as a data processor. Nubiabeautyy remains the data controller for customer data collected through Square transactions. Privacy policy: squareup.com/gb/en/legal/general/privacy

All third-party processors we use are contractually required to handle your data securely and only for the purposes we specify. We do not authorise them to use your data for their own marketing or to share it with others.

We keep your personal data only for as long as is necessary for the purpose it was collected, or as required by law.

Appointment records

3 years from your last appointment, in line with standard beauty therapy practice and potential liability periods.

Health / skin consultation forms

3 years from your last appointment.

Shop order records

7 years, as required by HMRC for financial records.

Marketing email subscribers

Until you unsubscribe, or for up to 2 years of inactivity — whichever comes first.

General enquiries

12 months from the date of your enquiry.

Website analytics

As per Squarespace's default retention settings (typically up to 2 years).

When we no longer need your data, it is deleted or anonymised securely.

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data. You can exercise any of these rights at any time by contacting us at admin@nubiabeautyy.com.

Right of access

You can ask us to confirm whether we hold personal data about you and to provide you with a copy. This is sometimes called a Subject Access Request (SAR).

Right to rectification

You can ask us to correct any inaccurate or incomplete personal data we hold about you.

Right to erasure

You can ask us to delete your personal data where there is no compelling reason for us to continue processing it. This is sometimes called the 'right to be forgotten'.

Right to restrict processing

You can ask us to pause or limit how we use your data in certain circumstances — for example, while a dispute is being resolved.

Right to data portability

Where processing is based on your consent or a contract, you can ask us to provide your data in a structured, commonly used, machine-readable format.

Right to object

You can object to us processing your data where we rely on legitimate interests as our lawful basis. You have an absolute right to object to processing for direct marketing purposes.

Right to withdraw consent

Where processing is based on your consent, you can withdraw it at any time. This will not affect processing that took place before withdrawal.

Rights re. automated decisions

We do not make automated decisions about you using your personal data.

We will respond to all rights requests within one month. We will not charge a fee for responding to requests, unless a request is manifestly unfounded or excessive.

If you wish to raise a data protection complaint, please contact us by email at admin@nubiabeautyy.com with the subject line 'Data Protection Complaint'.

We will acknowledge your complaint within five working days and aim to resolve it within 30 days.

If you are not satisfied with our response, or if you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Our website uses cookies. A cookie is a small text file placed on your device when you visit a website. Cookies help websites function correctly and provide useful information about how visitors use the site.

For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

Essential cookies

These are necessary for the website to work and cannot be switched off. They do not require your consent. They include cookies that enable you to log in to the Squarespace checkout, add items to your cart, and use secure features of the site.

Analytics cookies

Squarespace uses analytics cookies to help us understand how visitors use the website — for example, which pages are most popular and how long visitors stay. This information is used in aggregate and does not identify individuals. We only set analytics cookies if you have given your consent via our cookie banner.

Managing your cookie preferences

When you first visit nubiabeautyy.com, you will be shown a cookie banner. You can choose to accept or decline non-essential cookies at that point. You can also change your preferences at any time by clearing your browser's cookies and revisiting the site.

Most browsers also allow you to control cookies through their settings. Please refer to your browser's help documentation for guidance

We take the security of your personal data seriously. We use the following measures to protect your information:

• All data collected through our website is processed over encrypted HTTPS connections.

• Appointment and booking data is stored within Acuity Scheduling, which uses industry-standard security measures.

• Payment processing is handled by our payment providers (Stripe via Acuity/Squarespace, GoCardless, and Square) — we do not store your card or bank account details.

• We limit access to your personal data to only those who need it to provide your services.

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. If you have any concerns about the security of your data, please contact us immediately at admin@nubiabeautyy.com.

Our website is not directed at children under the age of 13, and we do not knowingly collect personal data from children under 13 without verifiable parental consent.

Where we offer services to young people between the ages of 13 and 17 (for example, our Nubia Teen Facial), we require a parent or guardian to be present at the appointment and to provide consent on the young person's behalf where health-related information is collected.

If you believe we have inadvertently collected personal data from a child without appropriate consent, please contact us at admin@nubiabeautyy.com and we will take prompt steps to delete it.

Squarespace, Acuity Scheduling, and Square are US-based companies. GoCardless is UK-headquartered but may store or process data on servers outside the UK. When your data is transferred to or stored on servers outside the UK, we rely on appropriate safeguards in accordance with UK GDPR requirements for international transfers, including Standard Contractual Clauses or equivalent mechanisms.

For full details of how each provider handles international data transfers, please refer to their respective privacy policies:

–       squarespace.com/privacy,

–       gocardless.com/legal/privacy,

–       and squareup.com/gb/en/legal/general/privacy.

We may update this privacy policy from time to time to reflect changes in how we use your data, updates to our services, or changes in the law. When we make changes, we will update the 'Last reviewed' date at the top of this document and publish the updated version on our website.

We encourage you to review this policy periodically. If we make any significant changes that affect your rights, we will notify you directly where we hold your contact details.

If you have any questions about this privacy policy, would like to exercise any of your data rights, or wish to raise a data protection complaint, please get in touch:

Name

Nubiabeautyy — Nubiabeautyy

Email

admin@nubiabeautyy.com

Phone

+44 7851 178156

Address

Studio 34, 19 Pages Walk, London SE1 4SB

Website

nubiabeautyy.com