Privacy Policy for The Male Waxing Company
Last updated: July 2025
At The Male Waxing Company, we respect your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, and protect your data when you visit our website, make a booking, contact us, or purchase a product or service.
This policy applies to all visitors of www.themalewaxingcompany.co.uk, and users of our online booking platform.
Personal data we collect
When you use our online booking system, we collect personal information including your name, contact details (email address and phone number), treatment preferences, and appointment history. This data is essential for managing your bookings, sending confirmations and reminders, and tailoring your experience.
We also collect information when you purchase a gift card, send us a message via our contact form or email, or sign up to receive marketing updates. Additionally, technical data such as your IP address, browser type, and how you interact with the website is collected via cookies and analytics tools.
Health and Medical Information
As part of our treatment booking process, we may collect information about your health, medical history, or conditions relevant to waxing treatments. This includes information you provide when completing our online health and safety form, such as:
- Skin conditions (e.g., infections, rashes, sunburn)
- Circulatory or neurological issues (e.g., heart conditions, high/low blood pressure, epilepsy)
- Allergies (e.g., to products or wax)
- Medications that may affect skin sensitivity or healing
- Any other medical concerns that may affect the suitability or safety of treatments
This health information is necessary to ensure your safety during treatment and to comply with professional hygiene standards. It is treated as special category personal data under the UK GDPR.
We process this data under the lawful basis of explicit consent, which you provide when completing the medical form. You have the right to withdraw this consent at any time by contacting us, although this may affect our ability to provide certain treatments.
We ensure all health data is handled with strict confidentiality, stored securely within our booking platform, and only accessed by authorised personnel.
Our booking system
Our website uses a third-party booking software provider to manage appointments and customer communications. When you make a booking online, your personal data is securely stored and processed through this platform. The provider acts as a “data processor” on our behalf and is contractually obliged to protect your data in line with UK data protection laws.
This system may store your appointment history, notes on past treatments (if relevant), and your preferred contact method (SMS or email) for reminders. Your information is encrypted and stored securely, and access is limited to authorised personnel only.
If you create a customer account through the booking system, you can log in at any time to manage your details, view upcoming appointments, or update your communication preferences.
How we use your information
We use your personal data primarily to manage and fulfil your bookings, including sending appointment confirmations, reminders, and updates related to your visits. We may also contact you regarding rescheduling or cancellations.
If you have opted in, we may use your contact details to send promotional emails or offers relevant to your treatments. You can unsubscribe at any time using the link in our emails or by contacting us directly.
Data collected via cookies and analytics tools is used to understand how users interact with our website, allowing us to improve its functionality and performance.
Legal basis for processing
We rely on the following lawful bases under the UK GDPR:
- Contractual necessity: to provide you with the services you’ve booked.
- Legitimate interests: such as improving our website, preventing fraud, and managing appointments effectively.
- Consent: for sending marketing messages and storing optional cookies.
- Legal obligation: where required by HMRC or other regulators.
Cookies and analytics
Our website uses essential cookies to enable core functionality, including accessing the booking system. We also use analytics cookies to measure website traffic and performance. You can control or disable cookies through your browser settings, although this may affect functionality, including the ability to book treatments online.
Sharing your information
We do not sell your personal information. We share your data only with trusted third-party service providers, such as our online booking platform and payment processors. These providers are only permitted to use your data to deliver services to us and must maintain its security and confidentiality.
We may also share your information if required by law, for example with HMRC or law enforcement.
Data Storage and Location
We confirm that all personal data we collect and process is stored securely within the United Kingdom. Our booking platform and data processors operate servers located in the UK, ensuring your data is protected under UK data protection laws. Where any third-party services involved in processing your data are located outside the UK or the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as UK-approved Standard Contractual Clauses, to protect your information to the highest standards.
Data retention
We retain booking and transaction data for a period of six years to comply with tax and accounting obligations. Marketing preferences and customer accounts remain active until you request their deletion or until we close your account due to inactivity. Analytics data is retained for up to 12 months.
Your Rights under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR), you have several important rights regarding the personal data we hold about you. These rights help you understand, control, and protect your information:
- Right of Access: You have the right to request a copy of the personal data we hold about you. This allows you to understand how and why we use your information.
- Right to Rectification: If any of your personal data is inaccurate or incomplete, you can request that we correct or update it.
- Right to Erasure (Right to be Forgotten): You can ask us to delete your personal data in certain circumstances, for example, if it is no longer necessary for the purpose it was collected or if you withdraw consent.
- Right to Restrict Processing: You have the right to ask us to restrict how we process your data in certain situations, such as when you contest the accuracy of your data.
- Right to Object: You can object to the processing of your personal data, particularly if it is processed for direct marketing or legitimate interests.
- Right to Data Portability: You may request a copy of your personal data in a commonly used, machine-readable format, and you have the right to transmit this data to another controller if technically feasible.
- Right to Withdraw Consent: If our processing relies on your consent (for example, marketing communications), you can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to Lodge a Complaint: If you believe we have not handled your data in compliance with the law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
Children’s privacy
Our services are not intended for children under 13, and we do not knowingly collect data from minors. If you believe we’ve collected data from a child, please contact us and we will delete it promptly.
Data security
We take data security seriously and implement protective measures to keep your information safe. This includes encrypted website connections (HTTPS), secure servers, restricted system access, and regular reviews of our data protection processes and our booking provider’s security standards.
Updates to this Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or how we operate. The latest version will always be available on our website, and we may notify you directly if the changes are significant.
Contact Details
If you have any questions about this policy or your data, please contact:
The Male Waxing Company
Suite 8, 111 Spalding Road,
Deeping St James,
Peterborough, PE6 8SD, United Kingdom
Email: enquiries@themalewaxingcompany.co.uk
Telephone: 07982 422135
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): www.ico.org.uk