How we use your personal data
We will only use your personal data when the law allows us to including the Data Protection Legislation. Most commonly, we will use your personal data in the following circumstances:
- where we need to perform the contract we are about to enter into or have entered into with you.
- where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- where we need to comply with a legal or regulatory obligation.
Click www.ico.org.uk to find out more about the types of lawful basis that we will rely on to process your personal data.
Generally we intend to rely on consent as the legal basis for processing your personal data, However, there may be other ways in which we may lawfully process your personal data where we do not have your consent and we will rely on these where appropriate other than in relation to sending third party direct marketing communications to you via email or text message.
You have the right to withdraw consent to marketing at any time. Please contact us to do so.
Purposes for which we will use your personal data
We have set out below, in a table format, a description of all the ways we may use your personal data, and which of the legal bases we will primarily rely on to do so. We have also identified what our legitimate interests are where appropriate.
Note that we may process your personal data relying on more than one lawful ground depending on the specific purpose for which we are using your data.
Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.
Purpose/Activity includes |
Type of data includes |
Lawful basis for processing including basis of legitimate interest includes |
To register you as a new customer |
- Identity
- Contact
- Background
|
Performance of a contract with you |
To provide treatments |
- Identity
- Contact
- Financial
- Transaction
- Health Related
|
- Performance of a contract with you
- Necessary to comply with a legal obligation
- Necessary for our legitimate interests (to keep records of customers who have received treatments in case needed after treatment)
- Vital Interest
|
To process and deliver your order for goods or services including training such as:
- Manage payments, fees and charges
- Collect and recover money owed to us
|
- Identity
- Contact
- Financial
- Transaction
- Marketing and Communications
|
- Performance of a contract with you
- Necessary for our legitimate interests (to recover debts due to us)
|
To manage our relationship with you which will include:
- Notifying you about changes to our terms or privacy policy
- Asking you to leave a review or take a survey
|
- Identity
- Contact
- Profile
- Marketing and Communications
- Background
|
- Performance of a contract with you
- Necessary to comply with a legal obligation
- Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
|
To enable you to partake in a prize draw, competition or complete a survey |
- Identity
- Contact
- Profile
- Usage
- Marketing and Communications
|
- Performance of a contract with you
- Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
|
To administer and protect our business and its websites (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
- Identity
- Contact
- Technical
|
- Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
- Necessary to comply with a legal obligation
|
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you |
- Identity
- Contact
- Profile
- Usage
- Marketing and Communications
- Technical
- Background
|
Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) |
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences |
- Technical
- Usage
|
Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) |
To make suggestions and recommendations to you about cosmetic treatments, goods or services that may be of interest to you |
- Identity
- Contact
- Technical
- Usage
- Profile
|
Necessary for our legitimate interests (to develop our products/services and grow our business) |
Marketing and promotional offers from us
We may use your Identity, Contact, Background, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which cosmetic treatments, products, services and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have given us consent or have requested information from us or purchased cosmetic treatments, goods or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving that marketing.
Third-party marketing
We will get your express opt-in consent before we share your personal data with any other company including any Group Company for marketing purposes.
Opting out
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by updating your preferences at ‘yourmarketingchoice.hdbrows.com’.
Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a cosmetic treatment, product or service purchase, warranty registration, product or service experience or other transactions.
Cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
For more information about the cookies we use, please refer to our COOKIE POLICY.
Change of purpose
We will only use your personal data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose or we where we are permitted to use it under the Data Protection Legislation.
If you want an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.