How Elite Cosmetics uses personal information.
This notice covers website visits, direct enquiries, bookings, consultations, treatments and client images.
Last revised 26 August 2026.
ControllerElite Cosmetics
Who is responsible
Elite Cosmetics is the data controller
For this website and direct studio activity, Elite Cosmetics at 10A New Road, Linslade, Leighton Buzzard LU7 2LX decides why and how personal information is used.
Message on WhatsApp or use the contact page for a privacy question or rights request.
Information collected
Contact, booking and treatment information
01 Contact and enquiry
Name, telephone number, social-media account, messages, preferred contact route and the treatment or question you raise.
02 Booking and payment
Requested and confirmed appointment details, price, payment or deposit status, changes, attendance and communications.
03 Consultation and treatment
Relevant answers about suitability, previous work, reactions, medicines or health, consent, patch tests, treatment notes and aftercare.
04 Images
Photographs or videos supplied for consultation, recorded during treatment or separately approved for marketing.
05 Website
Basic technical request information held by the hosting provider. This site also remembers within the browser session whether the opening animation has already played.
Why it is used
Purposes and lawful bases
01 Enquiries and bookings
To answer questions, take steps requested before a contract and provide a confirmed appointment.
02 Treatment and records
To assess suitability, provide the requested service, follow safety and legal duties, keep appropriate records and deal with complaints or legal claims.
03 Health information
Relevant health information is used for treatment suitability and safety with explicit consent, unless another legal condition applies and is explained to you.
04 Marketing images
Identifiable client photographs or videos are used for marketing only with specific recorded consent. You can withdraw that consent for future use.
05 Site security and administration
Necessary technical data is used for the legitimate interests of providing, protecting and maintaining the website.
Who receives it
Service providers and external platforms
01 Booking provider
OpenBook processes information under its own notice when the online booking link is available.
02 Website providers
Hosting and technical suppliers process the limited information needed to deliver and secure the website.
- 03
Instagram
Instagram applies its own privacy terms when you open the profile or send a message through its service.
04 Professional or legal recipients
Information may be shared where necessary with insurers, advisers, healthcare professionals, regulators or law enforcement, subject to an appropriate legal basis.
International transfers
Some providers may process information outside the UK
Any provider processing personal information outside the UK must be covered by a lawful transfer mechanism and appropriate contractual safeguards. Check the linked provider notice for its current processing locations.
Retention
Information is kept only for an identified period
Enquiries that do not become bookings, booking and payment records, consultation and treatment records, health information, complaints and marketing permissions may need different retention periods. Information should be deleted or anonymised when its stated business, legal, insurance or claims period ends.
Your rights
Access, correction, deletion and other choices
01 Your rights
Depending on the circumstances, you can ask for access, correction, deletion, restriction, portability or an objection to processing.
02 Withdraw consent
You can withdraw consent at any time. This does not make earlier use based on valid consent unlawful.
03 Make a request
Message on WhatsApp or use the contact page. The studio may ask for enough information to confirm your identity.
- 04
Complain to the ICO
You can complain to the Information Commissioner’s Office if you remain concerned about how your information is handled.
Contact
Raise a privacy question
Message on WhatsApp or use the contact page to ask how information is used, make a rights request or withdraw marketing-image consent.
- ICO privacy-notice guidance
- Read the UK regulator’s explanation of privacy notices and cookies.
What happens when I use Instagram?+
You leave this website and use Instagram’s service. Instagram’s own privacy terms and account settings apply.
Should I send health information on Instagram?+
Do not send unnecessary health information, card details or photographs. Ask which information and contact route the studio needs.
Can I withdraw permission to use a marketing photo?+
Yes. Contact the studio to withdraw consent for future marketing use. Withdrawal does not make earlier use based on valid consent unlawful.
How do I make a privacy request?+
Message on WhatsApp or use the contact page. You can also complain to the ICO if a concern is not resolved.