Legal
Privacy Policy
Placeholder — client must complete before launch
This Privacy Policy explains how Beauty Room by Aga collects, uses and protects your personal information when you use this website or contact us. It is written to reflect the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Beauty Room by Aga ("we", "us", "our") is a beauty studio based at 43 Drum Street, Edinburgh, EH17 8RQ. For any questions about this policy or your personal data, contact us at aguska101@protonmail.com or +44 7590 271209.
2. Data we collect and why
When you complete our contact form we collect the information you provide, which may include:
- Your name
- Your email address
- Your phone number (if provided)
- The service you are interested in and the message you send
We use this information solely to respond to your enquiry, arrange appointments and provide the treatments you request. We do not sell your data or use it for unrelated marketing.
3. Lawful basis for processing
We process your enquiry data on the basis of your consent (given when you submit the form) and our legitimate interest in responding to and managing enquiries about our services. Where processing is needed to arrange a treatment, it is carried out to take steps at your request before entering into a service.
4. How long we keep your data
We keep enquiry information only for as long as needed to respond to you and manage our client relationship, after which it is deleted. [Client must complete before launch — confirm your retention period. MK Sites does not provide legal advice.]
5. Sharing and third-party services
We do not sell your personal data. We use the following third-party services that may process data on our behalf:
- Formspree — our contact form is delivered through Formspree, which stores and forwards your submission to us by email. Because Formspree stores submissions, deletion requests are actioned via the Formspree dashboard.
- Google Maps — the map on our contact page is embedded from Google, which may set cookies and process technical data when the map loads.
- Google Analytics 4 (GA4) — if enabled, GA4 helps us understand how the site is used. It only runs after you give consent through our cookie banner.
[Client must complete before launch — confirm the exact third parties used and add any others. MK Sites does not provide legal advice.]
6. Your rights under UK GDPR
You have the following rights over your personal data:
- The right to be informed about how your data is used
- The right of access (a Subject Access Request)
- The right to rectification (correction of inaccurate data)
- The right to erasure (the 'right to be forgotten')
- The right to object to processing
- The right to data portability
- The right to withdraw consent at any time
To exercise any of these rights, contact us at aguska101@protonmail.com. As form submissions are stored by Formspree, erasure requests relating to enquiries are actioned through the Formspree dashboard. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies
Strictly necessary cookies are used to make the site work. Any analytics or non-essential cookies are only set after you give consent through our cookie banner, and you can change your choice at any time. See our cookie banner for the current options.
8. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page. [Client must complete before launch — this is a placeholder policy. Have it reviewed by a qualified professional. MK Sites does not provide legal advice.]
