Privacy Policy

1. Who We Are

This privacy policy applies to Cuticulture, located at 110 Holme Lane, Hillsborough, Sheffield, S6 4JW. We are the data controller for any personal information you provide to us when booking appointments or using our services.

You can contact us regarding your personal data at: claire.rattigan@blueyonder.co.uk or 07809412498

2. What Data We Collect

When you book an appointment or use our services, we may collect:

• Your name and title
• Email address
• Phone number
• Appointment history (services booked, dates, staff)
• Any notes or preferences you provide

We do not collect payment card details directly — any payments are handled securely by our payment processor.

3. How We Use Your Data

We use your personal data to:

• Manage and confirm your appointments
• Send booking confirmations and reminders
• Contact you regarding changes to your appointments
• Maintain a record of your visit history
• Process payments for services provided

Our lawful basis for processing your data is the performance of a contract (your appointment booking) and our legitimate interest in providing you with a quality service.

4. How Long We Keep Your Data

• Client records — kept for as long as you remain an active client, and for up to 3 years after your last appointment
• Financial records — kept for 6 years in line with HMRC requirements

After these periods, your data will be securely deleted or anonymised.

5. Who We Share Your Data With

We do not sell or share your personal data with third parties for marketing purposes. We use the following trusted service providers who may process your data on our behalf:

• Neon — secure cloud database hosting
• Vercel — application hosting and delivery
• Resend — email delivery for booking confirmations
• Stripe — payment processing (where applicable)
• SMS provider — text message reminders (where applicable)

All providers are contractually obligated to handle your data securely and only for the purposes we specify.

6. Cookies

We use the following cookies on our booking platform:

• Session cookie — used to keep you logged in if you have an account. This is essential for the service to function and expires when you close your browser.
• Contact details cookie — if you complete a booking, we store your name, email and phone number in a cookie on your device for 90 days so your details are pre-filled on your next visit. This is stored locally on your device only.

We do not use advertising or tracking cookies.

7. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your personal data (right to be forgotten)
• Restriction — ask us to limit how we use your data
• Portability — request your data in a portable format
• Objection — object to our processing of your data

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us: