Privacy Policy

Who we are

Dulci Beauty & Trend, operated by Dulcinea Popovici as a sole trader, at 296 Heathway, Dagenham RM10 8LU. Contact: 07340 900019. We are the data controller for personal data collected through this website and in the course of providing aesthetic treatments.

What this policy covers

This policy explains what personal data we collect, how we use it, how we store it and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Personal data we collect

We collect the following categories of personal data:

• Contact details you give us when booking or enquiring (name, phone number, email if provided)
• Consultation and treatment records, including notes on your goals, skin and any contraindications you've disclosed
• Records of treatments delivered, dates and any aftercare guidance
• Payment-related data, limited to what is needed to confirm and record payment - card details themselves are processed by our payment provider, not stored by us
• Messages exchanged with us via phone, WhatsApp or this website's contact channels
• Limited technical data when you use this site (e.g. anonymised analytics, only if you accept analytics cookies)

Special category data

Some aesthetic treatments involve information about your health (e.g. skin conditions, allergies, contraindications). Where this is the case, we collect that information only with your explicit consent, only to the extent needed to deliver the treatment safely, and we treat it with additional care.

How we use your data and our lawful basis

• To deliver the treatments you've booked - lawful basis: contract
• To keep accurate consultation and treatment records - lawful basis: legal obligation and legitimate interest in safe practice
• To contact you about your appointments or aftercare - lawful basis: contract
• To handle enquiries and respond to messages - lawful basis: legitimate interest
• Optional analytics on this website - lawful basis: consent (only if you accept analytics cookies)

We do not use your data for marketing without your consent.

Who we share data with

We do not sell your data. We may share limited data with:

• Our payment provider, when you pay by card
• Our booking platform (Treatwell) if you book through it
• Service providers used for hosting this website
• HMRC and other authorities, where we are legally required to
• Our insurer or a regulator, where this is needed to comply with our professional obligations

How long we keep data

We keep treatment and consultation records for the period required by professional standards and insurance requirements (typically up to 7 years after your last visit). Contact details are kept while you remain a client and for a reasonable period after, then deleted. You can ask us to delete your data earlier, subject to any legal or professional retention requirements.

Cookies

This website uses only essential cookies to make the site work. Analytics cookies are optional and only set if you accept them through the cookie banner. You can change your mind at any time by clearing your browser storage for this site.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (subject to retention requirements above)
• Object to or restrict how we process your data
• Withdraw consent at any time, where consent was the lawful basis
• Receive your data in a portable format

To exercise any of these rights, contact us on 07340 900019. We will respond within one month.

Complaints

If you have a concern about how we've handled your data, please contact us first - we will work to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision.