Relaxed Environment. Bespoke Treatments. Exceptional Results.
Privacy Policy Overview
Privacy Policy
Last updated: 13th August 2026
At Anya & Huntress, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, make an enquiry, book an appointment or receive treatments from us.
This Privacy Policy applies to personal information collected through our website, booking systems, consultations, treatment records and other interactions with Anya & Huntress.
We aim to handle your information fairly, lawfully and transparently and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
The organisation responsible for your personal information is:
Anya & Huntress
7 Thorntree Avenue, Crofton, Wakefield, WF41NR
Newcastle Site - Primal Fitness, OES House, Unit 23, Mylord Crescent, Camperdown Industrial Estate, Killingworth, Newcastle Upon Tyne, NE12 5UJ
emma@anyaandhuntress.co.uk
07725985080
For the purposes of data protection legislation, Anya & Huntress is the data controller of the personal information we collect and use.
If you have any questions about this Privacy Policy or how we handle your information, please contact us using the details above.
2. Information We Collect
Depending on how you interact with us, we may collect the following information:
Personal and contact information
This may include:
Your name
Date of birth or age
Postal address
Email address
Telephone number
Appointment and booking information
Communication preferences
Treatment and consultation information
When you enquire about or receive certain aesthetic, skincare or beauty treatments, we may collect information necessary to assess your suitability and provide safe and appropriate treatment.
This may include:
Relevant medical history
Allergies and sensitivities
Current or previous medications
Existing medical conditions
Previous aesthetic or cosmetic treatments
Skin concerns and treatment history
Treatment notes
Consultation information
Aftercare information
Photographs taken as part of your treatment record, where applicable
Information about reactions, complications or treatment outcomes
Some of this information may constitute health data, which is classed as special-category personal data under UK data protection law and requires additional protection.
We only collect information that is relevant and necessary for the purposes for which we use it.
Payment information
Where you make a payment, we may collect information relating to the transaction. Payment card details may be processed directly by our payment provider rather than being stored by us.
Website information
When you use our website, we may collect information such as:
IP address
Browser and device information
Website usage information
Pages visited
Approximate location
Cookie and similar technology information
The information collected will depend on the cookies, analytics and other technologies used on our website.
3. How We Collect Your Information
We may collect information:
Directly from you when you contact us
When you complete an enquiry or booking form
During consultations
When you complete treatment or consent forms
When you communicate with us by telephone, email, text message or social media
When you make or attend an appointment
When you make a payment
When you use our website
Through our online booking or client management systems
From third-party services that you choose to use when interacting with us
Where we receive information about you from another source, we will provide the privacy information required by applicable data protection law.
4. How We Use Your Information
We may use your personal information to:
Respond to enquiries
Arrange and manage appointments
Provide consultations and treatments
Assess treatment suitability
Maintain accurate client and treatment records
Provide appropriate aftercare
Contact you regarding appointments
Send appointment reminders
Process payments
Manage cancellations and appointments
Respond to questions, complaints or concerns
Maintain the safety and security of our premises and systems
Improve our services and customer experience
Maintain appropriate business and financial records
Comply with legal and regulatory obligations
Protect our business, clients and staff from fraud or misuse
Send marketing communications where permitted and where you have provided the necessary permission or we otherwise have a lawful basis to do so
We will not use your personal information for purposes that are incompatible with the purposes explained in this Privacy Policy unless we are legally permitted or required to do so.
5. Our Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contract: where processing is necessary to provide services you have requested or to take steps at your request before providing those services.
Legal obligation: where we need to process information to comply with a legal or regulatory requirement.
Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
Consent: where we ask for your consent to use your information for a particular purpose, such as certain marketing activities.
You can withdraw consent where we rely on consent as our lawful basis.
6. Health and Special-Category Information
Some of the information we collect during consultations and treatments may be health information and therefore special-category data.
We only collect and use this information where it is necessary and appropriate for purposes such as assessing suitability, providing treatments safely, maintaining treatment records and providing appropriate aftercare.
Special-category data requires both a lawful basis under Article 6 of the UK GDPR and an additional condition under Article 9. The appropriate condition will depend on the circumstances and the services being provided.
Where we rely on explicit consent for processing health information, that consent will be obtained in a clear and appropriate manner.
We take additional care with health information and limit access to those who need it for legitimate business or treatment-related purposes.
7. Treatment Photographs
Where photographs are taken as part of a consultation or treatment record, they may be stored securely as part of your client record.
We will not use identifiable treatment photographs for marketing, social media, advertising or promotional purposes without obtaining the appropriate permission from you.
Where you agree to the use of photographs for marketing purposes, you may withdraw that permission for future use at any time, subject to any legal or contractual limitations that may apply.
8. Marketing
We may occasionally contact you with information about our services, treatments, offers, events or other relevant updates.
Where required by law, we will ask for your consent before sending direct marketing communications.
You can unsubscribe from marketing communications at any time by:
Following the unsubscribe instructions included in the communication;
Contacting us directly; or
Using any marketing preference options we provide.
Please note that opting out of marketing communications will not prevent us from sending essential service-related communications, such as appointment confirmations, changes or treatment-related information.
9. Who We Share Your Information With
We will only share your personal information where necessary, lawful and appropriate.
This may include sharing information with:
Our employees and practitioners where necessary to provide our services
Booking and appointment management providers
Payment providers
Website hosting and IT service providers
Email, SMS and communication providers
Professional advisers such as accountants, insurers or legal advisers
Regulators, authorities or law-enforcement bodies where legally required
Healthcare or other professionals where appropriate and where lawful
Where we use third-party service providers to process personal information on our behalf, we take reasonable steps to ensure that appropriate contractual and security measures are in place.
We do not sell your personal information to third parties.
10. International Transfers
Some of the technology and service providers we use may process personal information outside the UK.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your information receives an appropriate level of protection in accordance with applicable data protection requirements.
11. How We Protect Your Information
We take reasonable technical and organisational measures to protect your personal information against:
Unauthorised access
Accidental loss
Destruction
Misuse
Alteration
Unauthorised disclosure
Access to client and treatment information is restricted to individuals who have a legitimate reason to access it.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
12. How Long We Keep Your Information
We only keep personal information for as long as we reasonably need it for the purposes for which it was collected, including to meet legal, regulatory, accounting, insurance and record-keeping requirements.
Different types of information may be retained for different periods.
Treatment and health-related records may need to be retained for an appropriate period following treatment. The precise retention period will depend on the nature of the treatment, applicable legal or regulatory requirements and our professional and insurance obligations.
When information is no longer required, we will securely delete or dispose of it.
13. Cookies
Our website may use cookies and similar technologies.
Cookies may be used to:
Make our website function correctly
Remember preferences
Understand how visitors use our website
Improve website performance
Measure marketing activity
Support relevant advertising, where applicable
Where required, we will ask for your consent before placing non-essential cookies on your device.
Further information can be found in our Cookie Policy.
14. Your Data Protection Rights
Subject to certain legal exceptions, you may have rights under UK data protection law, including the right to:
Ask for a copy of the personal information we hold about you
Ask us to correct inaccurate or incomplete information
Ask us to delete your information in certain circumstances
Ask us to restrict how we use your information in certain circumstances
Object to certain types of processing
Ask for your information to be transferred to another organisation where the right to data portability applies
Withdraw consent where we rely on consent to process your information
Make a complaint about how we use your information
These rights are subject to certain conditions and exemptions under data protection law.
To exercise your rights, please contact us using the details provided in this Privacy Policy.
15. Complaints
If you have concerns about how we have handled your personal information, we would encourage you to contact us first so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
You can find information about making a complaint through the ICO's website:
Information Commissioner's Office (ICO)
16. Children's Privacy
Our services may have age restrictions depending on the treatment being provided.
We do not knowingly collect personal information from children through our website where this is not appropriate or permitted.
Where a treatment or service involves a person under 18, we will apply our relevant age, consent and safeguarding procedures.
17. Third-Party Websites
Our website may contain links to third-party websites, including booking platforms, social media platforms and other services.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing your personal information.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, legal requirements or the way we process personal information.
The latest version will be published on this page with the date of the most recent update.
19. Contact Us
If you have any questions about this Privacy Policy or how Anya & Huntress handles your personal information, please contact us:
Anya & Huntress
7 Thorntree Avenue, Crofton, Wakefield, WF41NR
07725985080
Privacy Policy last updated: 13th August 2026
Important
This is a website privacy-policy template, not formal legal advice. Before publishing it, you should replace all placeholders and make sure it accurately reflects the actual systems your salon uses—for example, your booking platform, payment provider, email/SMS provider, website analytics, Meta/Google tracking, CCTV and any practitioners or healthcare professionals involved.
This is particularly important for an aesthetics business because treatment records and medical information can constitute special-category health data. The ICO recommends that businesses clearly explain what information they collect, why they collect it, their lawful basis, who receives it and how long they keep it.