Privacy Policy
Your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your personal information when you interact with our website. We are committed to safeguarding your data and ensuring transparency in our practices. Please take a moment to read through this policy to understand your rights and our responsibilities regarding your information.


OUR COMMITMENT
​
We are dedicated to protecting your privacy and that of our website visitors. Any information we collect will be used in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003. We will not share collected information with any third-party companies for direct marketing purposes.
WHO WE ARE
​
This Privacy Notice is provided by VITALUXE Health & Aesthetics, which trades under the same name. This Notice applies to all individuals whose personal data is collected by VITALUXE Health & Aesthetics.
VITALUXE Health & Aesthetics is a clinic that offers a wide range of treatments for the face and body. We provide bespoke treatments tailored to each client’s needs. VITALUXE Health & Aesthetics is located at 1 High Street, Fareham, PO16 7AG.
If you have any questions regarding GDPR, data protection, or how we handle your personal data, please contact Melojane Herbert at melojane@vitaluxe.uk or call 01329 448677. She will make every effort to provide you with a response.
The purpose of this notice is to inform you, the data subjects, about the personal data we collect in compliance with GDPR requirements.
HOW WE COLLECT DATA
​
VITALUXE Health & Aesthetics generally receives personal data directly from the individuals concerned while conducting business. This may occur in person, via email, through web forms, or over the telephone. In some cases, personal data may be provided by third parties (e.g., online booking platforms or job sites) only when you have specifically booked a service or treatment or responded to a job vacancy offered by VITALUXE Health & Aesthetics on these platforms.
THE DATA WE COLLECT
​
In the course of our business, VITALUXE Health & Aesthetics may collect the following types of personal data:
- Names, postal addresses, telephone numbers, email addresses, and other contact details (telephone calls may be recorded for training purposes).
- Financial information, which may include bank and credit card details.
- Information provided in medical questionnaires regarding a person’s health and relevant medical conditions that could affect the suitability of treatments.
- Still images of clients during the treatment process (to assess before and after) and any video captured by the CCTV security system installed at our premises.
- Personnel files related to employment and recruitment.
- Technical information such as cookies, IP addresses, and browser types when you visit our website.
For any disclosure of information about another person, you must have their full consent to disclose and process their personal information in accordance with this policy. If we need to process the data of a child (individuals under the age of 16), we will seek consent from the individual who holds parental responsibility for the child.
WHY WE PROCESS YOUR PERSONAL DATA
​
During our business operations, we need to process a wide range of personal data and will do so in compliance with the law. Some processing is required to meet VITALUXE Health & Aesthetics legal obligations, including those related to employees or contractual obligations, such as those involving our insurers. In other cases, we process data when it is in our legitimate interests, except where those interests are overridden by the rights and freedoms of the data subject.
VITALUXE Health & Aesthetics has determined that the following uses fall under legitimate interests:
- Recommending and providing treatments and products.
- Providing information on pre- and post-care before and after treatment.
- Confirming and reminding individuals of appointments via email and text messages.
- Sending newsletters and other relevant offer emails to keep clients updated on new products and services. You can opt out of this communication at any time.
- Ensuring security to protect our websites, infrastructure, and premises from threats, and reporting any illegal activities.
Given that we must collect health information, classified as a special category of personal data, we rely on the condition that processing is necessary for the provision of health care or treatment.
WHO HAS ACCESS TO DATA & WHO WE SHARE IT WITH
​
Personal information collected will not be shared with any third-party companies for direct marketing. Typically, personal data collected by VITALUXE Health & Aesthetics will remain within our organisation and will be processed by authorised employees. Some processing may be carried out by third parties, such as website developers or cloud storage providers, but it will always be kept secure and processed under the direction of VITALUXE Health & Aesthetics.
Occasionally, we may need to share personal information to meet our legal obligations or for contractual purposes with third parties such as banks, lawyers, insurers, accountants, or government authorities.
If you choose to apply for financing, we will only share your email address with the finance company so that they can communicate with you directly.
Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
HOW LONG WE KEEP PERSONAL DATA
​
We are committed to complying with our legal obligations regarding the retention and deletion of personal information. The type of data and the purpose for its collection will determine how long VITALUXE Health & Aesthetics retains your data. We will not process your personal information for longer than necessary.
- Employee data may be retained for up to seven years following their departure from the company.
- Details of unsuccessful applicants for vacancies will be stored for up to one year.
- Our insurers require VITALUXE Health & Aesthetics to keep client records, including medical data, images, and treatment details, for 10 years from the date of your last treatment, after which this information will be securely disposed of.
- Data from individuals engaged with the business, such as contacts for active contracts or recipients of our monthly newsletter, will be retained as long as the service is being contracted or the newsletter is being sent.
- Emails of those who have opted out of receiving our newsletter services will be kept indefinitely to ensure continued compliance.
- Financial and accounting records will be maintained for six years from the end of the last financial year they relate to, or longer if the tax return was submitted late or if HMRC requests it.
YOUR RIGHTS AS A DATA SUBJECT
​
At any time while we are in possession of or processing your personal data, you, the data subject, have the following rights:
- Right of Access: You have the right to request a copy of the information we hold about you.
- *Right of Rectification: You have the right to correct any inaccurate or incomplete data we hold about you.
- Right to be Forgotten: In certain circumstances, you can request that the data we hold about you be erased from our records.
- *Right to Restrict Processing: Under specific conditions, you have the right to restrict the processing of your data.
- Right of Portability: You have the right to have the data we hold about you transferred to another organization.
- Right to Object: You have the right to object to certain types of processing, such as direct marketing.
- *Right to Object to Automated Processing: You also have the right to avoid being subject to the legal effects of automated processing or profiling.
- Right to Judicial Review: If we refuse your request under your right of access, we will provide a reason for the refusal, and you have the right to lodge a complaint.
THIS PRIVACY NOTICE
​
VITALUXE Health & Aesthetics will update this privacy notice as needed. Our website will reflect the most current version of this notice when updates occur. Please check the Privacy Policy page periodically to ensure you are satisfied with any changes made.
COMPLAINTS
​
If you believe we have not complied with our privacy notice, you may complain to the Information Commissioner’s Office (ICO). However, as recommended by the ICO, please allow VITALUXE Health & Aesthetics the opportunity to resolve the matter before involving the regulator.
All queries and complaints should initially be directed via email to Melojane Herbert at melojane@vitaluxe.uk or call 01329 448677.
November 2024