Who we are
Botanical Beauty Bristol Limited is a company registered in England and Wales with company number 11873642 (“Botanical Beauty”, “we” or “our”).
What information do we collect?
Personal Data we collect, hold and process about you may include:
contact information – such as your name, address, email address and telephone number;
credit card and other payment account and billing information supplied by you;
correspondence if you contact us;
customer appointment details, such as the date and history of treatments booked, cancelled and undertaken; and
purchase/transaction details and history.
If you provide us with any Personal Data relating to any third party (e.g. information about your spouse or friend) for particular purposes (e.g. booking / purchasing a treatment for them), by submitting such information to us, you warrant and represent to us that you have obtained the consent of such third party to provide us with their Personal Data for the respective purposes.
How we collect Personal Data
Personal Data may be collected by us at the following points:
directly from you by phone, email, post or in person;
directly from you through our website e.g. via our online booking tool;
directly from you if you send us a social media message;
through any other online booking platform you may use (e.g. Treatwell); and
via cookies from general website use (please see the ‘Cookies’ section below for further information).
What we do with your Personal Data
Personal Data may be used by us for the following purposes:
to process, administer and manage your booking and enquiries;
to collect payment from you;
process and administer gift vouchers;
to administer and manage our relationship with you, which may include asking you to complete feedback forms/surveys;
communicate any information about any treatment bookings you have with us or have enquired about;
to resolve an enquiry, acknowledge feedback or progress a complaint;
administration and management of our promotions;
where necessary to protect your health and well-being or that of another individual connected to you; and
where required by law.
Sharing your Personal Data
We may disclose your Personal Data to payment providers, technology providers, insurers and other specialist professional and advisers, to manage bookings, arrange payments and provide our services.
Personal Data may also be shared with the Bradley Stoke Leisure Centre security or head office team, regulators, government authorities and/or law enforcement officials for where we are required to do so by law, pursuant to legal process, to comply with any applicable rules or regulations, or in response to a legitimate request from a law enforcement authority or other government official.
Some of the third parties that we disclose Personal Data to may be based outside the European Economic Area (“EEA”), so their processing of your Personal Data will involve a transfer of your Personal Data out of the EEA. Whenever we transfer your Personal Data out of the EEA, we will ensure a similar degree of protection is afforded to it.
Only with your express consent will we send you marketing communications, mainly via email featuring content or offers we think you might be interested in. We may also use this information to show you relevant content via our official social media profiles (e.g. Instagram and Facebook).
How long we retain your Personal Data
We will only retain your Personal Data for as long as is necessary to fulfil the purposes we have collected it for, and for the purpose of satisfying any legal, accounting or reporting requirements.
The appropriate retention period will depend upon the purpose for which we are processing the data and where the data is processed for two or more purposes, we will retain it for the longest period. We consider our retention period range of 2 - 7 years, to be appropriate and fair.
We may, by law, have to retain certain information and this Personal Data will be held solely and securely for legal purposes.
How we protect your Personal Data
We maintain administrative, technical and physical safeguards designed to protect the Personal Data you provide against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.
Service providers and contractors who might have access to your Personal Data in order to provide services on our behalf will be contractually obliged to keep such data in confidence, provide adequate data security measures, and may not use that data for any other purpose.
For your own protection, we encourage you not to include sensitive Personal Data, credit card information or similar Personal Data in any e-mails you send us or our staff.
If you are a “data subject” under applicable data protection law in the EU or United Kingdom, you will have the following rights in relation to Personal Data that we hold about you:
Right to Access - to request confirmation of whether we process Personal Data relating to you, and if so, to request a copy of that Personal Data;
Right to Rectification - to request that we rectify or update any Personal Data that is inaccurate, incomplete or outdated;
Right to Erasure - to request that we erase your Personal Data in certain circumstances, such as where we collected Personal Data on the basis of your consent and you withdraw your consent;
Right to Restriction of Processing - to request that we restrict the use of your Personal Data in certain circumstances, such as while we consider another request that you have submitted, for example a request that we update your Personal Data;
Right to Withdraw Consent - where you have given us consent to process your Personal Data, to withdraw your consent; and
Right to Data Portability - to request that we provide a copy of your Personal Data to you in a structured, commonly used and machine-readable format in certain circumstances.
To exercise your rights as set out above, to make a complaint or submit an inquiry about our privacy practices, please contact us by (i) emailing us at firstname.lastname@example.org or (ii) writing to us at the relevant address set out in the ‘How to contact us’ section below.
To help protect your privacy and maintain security, we may take steps to verify your identity before we can action your request.
Cookies are tiny, harmless text files sent to your computer or mobile when you visit a website and there are different types of cookies – these are the cookies we use on our website:
Persistent Cookies which help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not.
Session Cookies which remember your selections when using the web booking system – these are essential to the working of the website and if disabled you will not be able to use this part of the site.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies based on implied consent, but you can modify your browser setting to decline cookies if you prefer although this may prevent you from taking full advantage of the website. To find more information about cookies and how to control or delete them we recommend you visit aboutcookies.
How to contact us
If you have any questions about your Personal Data or if you wish to exercise any of your data rights set out above, please contact us via:
Telephone: 01454 865 894; and/or 07761915097
Post: Botanical Beauty, Bradley Stoke Leisure Centre, Fiddlers Wood Lane, BS32 9BS.