1. Who I Am

Sabrina Falk is the data controller for personal data collected in relation to bookings and treatments.
Contact:
[email protected]
SHY Studio, 35 Lewes High Street, Lewes, BN7 2LU

2. Information Collected

The following information may be collected:

Name

Contact details (email, phone number)

Date of birth

Medical information relevant to treatment

Appointment history

Payment information (processed securely via third-party provider)

Medical information is collected solely for safety and treatment suitability.

3. How Your Information Is Used

Your data is used to:

Manage appointments

Assess treatment suitability

Maintain treatment records

Provide aftercare

Comply with insurance and legal obligations

Your information will never be sold or shared for marketing purposes.

4. Legal Basis for Processing

Data is processed under:

Consent (medical forms, treatment records)

Contract (providing booked services)

Legal obligation (insurance and safety compliance)

5. Storage & Security

Client records are stored securely via the SHY booking system and password-protected systems.
Paper records (where applicable) are stored securely within the studio.
Data is retained for the period required by insurance and industry guidelines (typically 6–7 years).

6. Your Rights

Under UK GDPR, you have the right to:

Access your data

Request correction of inaccurate information

Request deletion (where legally permitted)

Withdraw consent

Requests can be made via email.

7. Photography

Before and after photographs may be taken for insurance and record purposes.
If you would prefer your images to not be used for marketing, please advise Sabrina at your appointment.

8. Cookies

The website may use cookies to improve user experience and analyse website traffic.
You may disable cookies through your browser settings.

9. Changes to This Policy

This policy may be updated periodically. The latest version will always be available on the website.