Privacy Policy

Gul Gul Beauty Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Gul Gul Beauty Ltd, company number 17326650, registered address 9 Mark Road, Noel Park, London, N22 6PX. We are the data controller for the personal information we hold about you.

2. What Information We Collect

We may collect:

• Name, email address, phone number
• Appointment and treatment history
• Billing/delivery address (for retail orders)
• Payment confirmation details (we do not store full card details — payments are processed securely by our payment provider)
• Health-related information relevant to treatments (e.g. allergies, skin sensitivities), where you choose to share it, for your safety during treatments

3. How We Use Your Information

We use your information to:

• Manage and confirm your bookings
• Process orders for retail products and gift vouchers
• Provide safe treatments (e.g. checking for allergies or contraindications)
• Respond to enquiries and provide customer service
• Send appointment reminders and, with your consent, marketing updates
• Meet our legal and accounting obligations

4. Legal Basis for Processing

We process your data on the basis of: performance of a contract (bookings/orders), legitimate interests (running our business, preventing fraud), consent (marketing communications), and legal obligation (accounting/tax records).

5. Sharing Your Information

We do not sell your personal data. We may share it with trusted third parties who help us run our business, such as payment processors, booking software providers, and IT service providers, only to the extent necessary for them to provide their service to us.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy legal, accounting, or reporting requirements.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing
• Request data portability
• Withdraw consent to marketing at any time

To exercise any of these rights, contact us at gulnura.ask2@gmail.com.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

9. Cookies

Our website may use cookies to improve your browsing experience. You can control cookies through your browser settings.

10. Complaints

If you have concerns about how we handle your data, please contact us first at gulnura.ask2@gmail.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page.