Effective Date: Monday 9th June

1. Introduction

By using this website (https://www.musemedispa.co.uk), you agree to be bound by the terms set out in this policy. These terms affect your legal rights and responsibilities, so please read them carefully. If you do not agree with any part of this policy, please stop using the website immediately.

The Muse Medi Spa by Essex Cosmetics is committed to protecting your personal data. This policy explains how we collect, use, store and safeguard the information you provide, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect only the information necessary to provide you with a safe and effective service. This may include:

• Full name

• Date of birth

• Postal address

• Email address

• Telephone number

• Medical history relevant to your treatment

• Payment details (when booking appointments or purchasing products)

• Appointment and order history

• Browser and device information via cookies and analytics tools

We retain booking and order data for our records unless you request its deletion.

3. How We Use Your Information

We use your information for the following purposes:

• To manage bookings and process payments

• To communicate with you regarding appointments, orders, or enquiries

• To personalise your online experience

• To improve and maintain our website and services

• To analyse usage trends and customer preferences

• To detect and prevent fraud or security breaches

• To comply with our legal obligations

4. Sharing Your Information

We only share your personal data with trusted third parties when necessary to deliver our services or meet regulatory requirements:

Booking System: Aesthetic Nurse Software

• Secured with SSL encryption for end-to-end data protection

• Unique Patient IDs used to anonymise stored records

• Data is regularly backed up using Amazon Web Services (AWS)

• Password-protected access with automatic session timeouts

Analytics: Google Analytics

• Used to understand how visitors interact with our website

• Read Google’s Privacy Policy: https://www.google.com/intl/en/policies/privacy/

• You can opt out of tracking: https://tools.google.com/dlpage/gaoptout

We will never sell, rent, or trade your personal information. If we are ever required to share data for any purpose not listed above, we will obtain your written consent first.

5. Cookies and Web Beacons

We use cookies to enhance your browsing experience. These small text files store information such as:

• Your browser type and settings

• Pages visited and time spent on each

• Visitor preferences and session details

This helps us customise content and improve website functionality. You can manage or disable cookies in your browser settings. For more details, visit www.allaboutcookies.org.

6. Log Files

As part of standard hosting practice, we use log files to collect technical data including:

• IP addresses

• Browser types

• Internet Service Providers (ISP)

• Date and time stamps

• Referring and exit pages

• Number of clicks

This data is not linked to any personally identifiable information and is used to analyse trends, administer the site, and improve the user experience.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Once data is no longer needed, it is securely archived or destroyed.

8. Your Rights (UK & GDPR)

If you are based in the UK or the European Union, you have the right to:

• Access the personal data we hold about you

• Request corrections or updates

• Request deletion of your data

• Object to or restrict how your data is processed

• Receive a copy of your data in a portable format

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us using the information provided below.

9. Data Security

We take every reasonable precaution to protect your information:

• Secure servers with encrypted data transfer

• Password-protected access and session controls

• Regular cloud backups with restricted access

• Ongoing monitoring to prevent unauthorised access

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The latest version will always be available on this page, with an updated effective date.

11. Contact Us

If you have any questions about this policy, or would like to exercise your rights, please contact us:

Email: info@essexcosmetics.co.uk
Post: The Muse Medi Spa, 79 Springfield Road, Chelmsford, CM2 6JG