Ria London Privacy Policy – Your Data Protection Rights And Privacy Information

Privacy Notice

What does this notice cover?

This notice describes how Ria London (“Ria London”, “we”, “us”, or “our”) processes your personal information when you visit our salon or interact with us online, via email, or through social media. It also outlines your data protection rights, including your right to object to some of the processing activities we carry out. More details about your rights and how to exercise them are provided in the “Your data protection rights” section.

We may also provide additional information when collecting personal data to ensure clarity and transparency.

If you have any questions, please contact us using the details in the “Contact us” section.

What personal information do we collect?

When we refer to “personal information” in this notice, we mean information that identifies you. We collect and process your personal information when you interact with us, including:

Identity and contact information: Your name, age, postal address, email address, and phone number.
Transaction information: Payment details (e.g., bank or card information) where used for purchases.
Treatment details: The nature and scheduling of your treatments, relevant medical history, and any adverse reactions.
Photographs: Images taken before and after treatments.
Device information: Information related to the device or browser you use to access our online platforms, such as IP address (collected via cookies and similar technologies – see our Cookies Notice for more information).
Marketing preferences: Consents you provide regarding marketing communications.
Other information: Any additional data you provide through direct communications with us.

Some of this data may include sensitive information (e.g., health-related data such as allergies, treatment details, or photographs). Sensitive data will only be collected and processed where necessary for our services or with your explicit consent.

How do we use this information, and what is the legal basis for this use?

We will only use your personal information when permitted by law. Most commonly, we will use your data in the following circumstances:

To perform a contract: When necessary to provide you with services.
Legitimate interests: Where necessary to manage our business, provided your rights do not override these interests.
Consent: When you have explicitly agreed to certain uses, such as marketing.
Compliance with legal obligations: When required by law.

The purposes for processing your personal data include:

Purpose	Type of Data	Legal Basis
To create an account and register you as a customer	Identity and contact information	Performance of a contract
To provide services and products	Identity, contact, transaction, and treatment details	Performance of a contract; Legitimate interests
To maintain records of treatments and preferences	Identity, transaction, treatment details, photographs	Legitimate interests
To manage customer relationships and gather feedback	Identity and contact information	Performance of a contract; Compliance with laws
To ensure the security of our business	Identity, device, and account information	Legitimate interests; Compliance with laws
To market our services	Identity, contact, and marketing preferences	Legitimate interests; Consent
To meet legal and regulatory requirements	All relevant information	Compliance with laws

Sharing your personal information

We may share your personal information with:

Service providers: Third parties that process data on our behalf (e.g., IT providers, payment processors, and marketing services).
Regulatory authorities: As required for legal or regulatory purposes.
Business transfers: In the event of a sale, merger, or business restructuring, your information may be shared with advisors and prospective buyers.

International transfers

We primarily store and process personal information within the UK. However, if we work with providers or affiliates outside the UK or EEA, we will ensure adequate protection of your data through appropriate safeguards, such as standard contractual clauses.

How long we keep your personal information

We retain your data only as long as necessary for the purposes outlined in this notice or to meet legal obligations. Generally, we keep treatment and transaction records for up to 6 years from your last interaction with us.

Your data protection rights

You have the following rights regarding your personal information:

Access: Request a copy of the data we hold about you.
Correction: Update or correct inaccurate information.
Deletion: Request deletion of data, subject to legal obligations.
Restriction: Limit how we process your data.
Data portability: Obtain your data in a machine-readable format.
Objection: Object to specific processing, such as direct marketing.
Withdraw consent: If processing is based on consent, you can withdraw this at any time.

To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not handled your data properly.

Updates to this notice

We may update this privacy notice periodically to reflect changes in our practices or legal requirements. We will notify you of significant updates where appropriate.