Privacy Policy


At Pamper Room, your privacy is important to me.


This Privacy Policy explains what personal information I collect, why I collect it, how it is used and stored, who it may be shared with, and your rights regarding your information.


Pamper Room is owned and operated by Angela Timson, trading as Pamper Room, and I am the data controller responsible for the personal information collected by the business.


Pamper Room
4 Brookbridge Court
1189 Melton Road
Syston
Leicester
LE7 2JT


Email: pamperroom@hotmail.co.uk


Information I Collect


Depending on how you interact with Pamper Room and the treatments you receive, I may collect:

  • Your name
  • Telephone number
  • Email address
  • Appointment and booking history
  • Treatments and services received
  • Treatment and consultation notes
  • Payment and transaction information
  • Communications between you and Pamper Room
  • Gift Card information
  • Photographs, where appropriate and with your permission
  • Parent or guardian details and consent where required for younger clients


For some treatments, you may also be asked to provide information about your health.


This may include:

  • Medical conditions
  • Medications
  • Allergies and sensitivities
  • Pregnancy or breastfeeding
  • Previous treatments or reactions
  • Injuries or other relevant health information
  • Information required to identify contraindications or determine whether a treatment is appropriate for you


I only ask for information that is relevant to providing your treatment safely and professionally.



Why I Collect Your Information


Your personal information may be used to:

  • Make and manage appointments
  • Send booking confirmations and appointment reminders
  • Take and record payments
  • Maintain an appropriate record of treatments you have received
  • Assess whether a treatment is suitable and safe for you
  • Identify possible contraindications
  • Adapt treatments where necessary
  • Provide appropriate treatment and aftercare advice
  • Respond to your questions or enquiries
  • Contact you about an existing appointment
  • Manage cancellations, booking fees and Gift Cards
  • Maintain appropriate business, insurance and financial records
  • Deal with complaints, insurance matters or legal claims
  • Send occasional marketing communications where you have chosen to receive them


I will not use information collected during your consultation to send marketing communications unless you have separately agreed to receive marketing from Pamper Room.



My Lawful Bases for Using Your Information


Under UK data-protection law, I must have a lawful reason for processing your personal information.


Depending upon the circumstances, Pamper Room may process your information because:


It is necessary to perform a contract with you — for example, to book and provide your treatment, process your booking and communicate with you about your appointment.


I have a legitimate interest — for example, maintaining appropriate business and treatment records, responding to enquiries, protecting the business and dealing with disputes or potential claims, where those interests do not override your rights.


I have a legal obligation — where information must be retained or disclosed to comply with applicable law.


You have given your consent — for example, certain marketing communications, photographs used for promotional purposes and, where appropriate,

processing particular sensitive information.


You can withdraw consent where processing is based upon consent, although this does not affect processing that was lawful before consent was withdrawn.



Health & Consultation Information


Information concerning your health is classed as special category personal data and receives additional protection under UK data-protection law.


I collect relevant health information because it may be necessary to determine whether a treatment is safe and suitable for you.


Where required, I will ask for your explicit consent to process relevant health information for this purpose.


If you choose not to provide information that is necessary to assess the safety or suitability of a treatment, I may be unable to carry out that treatment.


Health information is not used for marketing purposes.



Consultation Forms & Treatment Records


Consultation forms and associated treatment records are held electronically through my salon booking and management system, Ovatu.


Your consultation information may be updated when your circumstances change or when further information becomes relevant to your treatment.


Please tell me if your health, medication, allergies or other relevant circumstances change so that your treatment record can be kept accurate.



How Long I Keep Your Information


I do not keep personal information for longer than reasonably necessary.


Consultation forms and relevant treatment records are generally retained for up to 7 years after your last treatment or interaction, where this is appropriate for insurance, professional, record-keeping or potential legal-claim purposes.


Some information may need to be retained for a different period where required by law, my insurer or another legitimate business requirement.

When information is no longer required, it will be securely deleted, anonymised or archived as appropriate.



Photographs


With your permission, I may take photographs before, during or after a treatment.


Where photographs form part of your treatment record, I will explain their purpose.


I will not use identifiable client photographs on the Pamper Room website, Facebook, Instagram or other promotional material without your permission.


Permission to use photographs for marketing or social media is separate from your treatment and you are free to say no.


Where promotional use is based on your consent, you can withdraw that consent for future use by contacting me. I will take reasonable steps to remove the image from places under my control, although I cannot guarantee removal of copies that have already been shared or captured by others online.



Marketing


I occasionally send information about Pamper Room treatments, news or offers by email or other electronic communication.


I will only send marketing communications where I have an appropriate lawful basis to do so, including consent where required.


You can ask me to stop sending marketing communications at any time.


Choosing not to receive marketing will not affect your ability to book or receive treatments at Pamper Room.



Appointment Reminders & Service Messages


Booking confirmations, appointment reminders, changes to appointments and other messages necessary to manage your booking are considered service communications rather than general marketing.


These may be sent using the contact information you have provided.



Payments


Online payments may be processed using third-party payment providers including Stripe and PayPal.


Pamper Room does not store your full debit or credit card details.


Payment providers process information in accordance with their own privacy and security policies.



WhatsApp, Email & Social Media


If you contact Pamper Room through WhatsApp, email, Facebook or Instagram, the information contained within your message will be processed for the purpose of responding to your enquiry or managing your appointment.


Those services are operated by third-party companies and their own privacy policies and data-handling practices also apply when you use their platforms.


Emails and messages that are no longer required are routinely deleted.


Relevant information from a conversation may, where necessary, be recorded within your client or treatment record rather than retaining the original message.



Who Your Information May Be Shared With


I do not sell your personal information.


Your information may be processed by trusted service providers where necessary to operate Pamper Room, including:

  • Ovatu, for appointments, client records and consultation forms
  • Stripe and PayPal, for payment processing
  • Website hosting and technology providers
  • Communication providers used to deliver emails, messages or appointment notifications


Information may also be disclosed where reasonably necessary to:

  • My insurance provider in connection with an insurance enquiry or claim
  • Professional or legal advisers
  • Law enforcement, regulators or other authorities where I am legally required to provide it
  • Protect the rights, safety or legitimate interests of Pamper Room, a client or another person


Only information reasonably necessary for the relevant purpose will be shared.



Children & Young People


Pamper Room provides certain treatments to teenagers and younger clients where appropriate.


Where required, I may collect the name and contact details of a parent or guardian and record their consent to treatment.


Health and consultation information relating to younger clients is treated with the same care and confidentiality as other client information.


The amount of information collected will be limited to what is reasonably necessary to assess and provide the treatment safely.



CCTV


For the safety and security of clients, myself and the premises, CCTV operates inside and outside Pamper Room.


The CCTV system is provided using Ring equipment.


CCTV images are used for legitimate security purposes, including:

  • Protecting clients and staff
  • Preventing and detecting crime
  • Protecting the salon and its property
  • Investigating incidents where necessary


CCTV footage is not used for marketing purposes.


Footage is retained only for as long as reasonably necessary for security purposes unless it needs to be preserved in connection with a particular incident, investigation, insurance matter or legal claim.


Appropriate signage is displayed to make visitors aware that CCTV is in operation.



Website & Cookies


The Pamper Room website may use cookies or similar technologies that are necessary for the website to operate correctly.


The website and its hosting or technology providers may also process technical information such as IP addresses, browser or device information and website activity as part of providing and securing the website.


Where non-essential cookies or tracking technologies are used, appropriate information and choices will be provided in accordance with applicable requirements.



Keeping Your Information Secure


I take reasonable steps to protect the personal information entrusted to Pamper Room.


Electronic client and consultation records are stored using systems designed to restrict unauthorised access.


Access to client information is limited to those who reasonably need it for the purposes described in this Privacy Policy.


No electronic system can be guaranteed to be completely secure, but I take appropriate steps to reduce the risk of loss, misuse or unauthorised access.



Your Data Protection Rights


Depending upon the circumstances, UK data-protection law gives you rights regarding your personal information.


These may include the right to:

  • Ask what personal information I hold about you
  • Request a copy of your personal information
  • Ask for inaccurate or incomplete information to be corrected
  • Ask for your information to be deleted in certain circumstances
  • Ask me to restrict the way your information is processed in certain circumstances
  • Object to certain uses of your information
  • Request transfer of certain information where applicable
  • Withdraw consent where I rely upon your consent


These rights are not absolute in every circumstance. For example, I may need to retain certain treatment records where there is a legitimate or legal reason for doing so.


To exercise your rights, please contact me using the details at the beginning of this Privacy Policy.


I may need to confirm your identity before releasing personal information.



Concerns & Complaints


If you have any concerns about how Pamper Room handles your personal information, please contact me first and I will do my best to resolve the matter.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.



Changes to This Privacy Policy


I may update this Privacy Policy occasionally to reflect changes to Pamper Room, the services I use or applicable data-protection requirements.


The most recent version will be available on the Pamper Room website.


Last updated: August 2026


Treatments