Version 0.1 – interim, last updated 2026-05-27. This Privacy Policy is being formally reviewed and may be updated. Material changes will be notified to active members.

Who we are

This website (waxforwomen.co.uk) is operated by Precision Life&Style Group Ltd (company number 17017520), registered in England and Wales with registered office at 6 Minshull Street, Piccadilly, Manchester, M1 3ED. We are the data controller for personal data collected through this website.

We are registered with the Information Commissioner’s Office (UK GDPR data controller (registration reference ZC157556). Contact us at info@plguk.com or 0161 564 4406.

What personal data we collect

We collect personal data in the following circumstances:

• When you book a treatment: name, contact details (email, phone), the treatments you book, the studio location, and any relevant medical history we ask about for safety reasons.
• When you sign up to an Unlimiwax membership: the above plus payment-mandate information (handled by GoCardless) and your treatment preferences for the membership.
• When you contact us: the contents of your message.
• When you visit the website: non-identifying technical data via cookies and analytics (see our Cookie Policy).

Why we use your data and our lawful basis

Under UK GDPR we must have a lawful basis for processing your personal data. We rely on:

• Performance of a contract – to deliver treatments you have booked or are subscribed to.
• Legitimate interest – to operate, secure and improve our service, send service-related communications, and manage our business.
• Consent – for marketing communications and non-essential cookies. You can withdraw consent at any time.
• Legal obligation – where we have to keep records for tax, accounting or other statutory reasons.
• Vital interests – where processing a small amount of health-related information is needed to keep you safe during a treatment.

Special category data (health)

Some treatments require us to ask brief health-history questions (allergies, pregnancy, skin conditions, current medication). This is “special category” data under UK GDPR. We process it on the basis of Article 9(2)(h) – provision of health care – and only to the extent needed to deliver the treatment safely. We do not use it for marketing.

Who we share data with

We share personal data only with service providers who help us deliver the service. Each is a data processor under written terms and is bound by UK GDPR equivalents:

• Fresha – booking system and customer scheduling.
• GoCardless – Direct Debit subscription payment processing (Unlimiwax membership).
• Stripe – card payments for one-off treatments and legacy memberships.
• HubSpot – customer relationship management and customer communications.
• Email and SMS providers – sending booking confirmations and reminders.
• Our accountants and professional advisers – for compliance with our legal obligations.

We do not sell or rent personal data to third parties.

International transfers

Some of our service providers (including HubSpot and Stripe) store data on servers located outside the UK. Where this is the case, we rely on UK-approved transfer mechanisms (UK Addendum to the EU Standard Contractual Clauses, adequacy decisions, or equivalent safeguards).

How long we keep data

• Active customer records – for as long as you are an active customer, plus 7 years for tax and accounting purposes.
• Treatment / clinical history records – minimum 8 years (in line with healthcare records guidance) where retained.
• Marketing data – until you opt out, plus a short period to record that you have opted out.
• Cookies and analytics data – see the Cookie Policy.

Your rights

Under UK GDPR you have the right to:

• Ask us what personal data we hold about you (Subject Access Request).
• Correct inaccurate data.
• Have your data erased where the law allows.
• Restrict how we use your data.
• Object to processing based on legitimate interests or for marketing.
• Withdraw consent at any time where we rely on consent.
• Receive your data in a portable format and ask us to send it to another controller.

To exercise any of these rights, email info@plguk.com. We will respond within one month.

Complaints

If you are unhappy with how we handle your data, please tell us first – we will do our best to put it right. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk / 0303 123 1113).

Updates

We update this policy from time to time. The current version is shown at the top of this page. Material changes to how we use member data will be communicated by email to active members.