Privacy Policy

1. Introduction

Pure Serenity Head Spa ("we", "our", "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal information when you use our website and services.

We are based at 3 Birdcage Walk, Dudley, West Midlands, DY2 7AE, United Kingdom.

2. Information We Collect

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number
• Booking Information: Appointment dates, treatment preferences, special requirements
• Gift Voucher Information: Purchaser and recipient details, personal messages
• Technical Information: IP address, browser type, device information, pages visited
• Communication Records: Messages sent via our contact form or email

3. How We Use Your Information

We use your personal information to:

• Process and manage your bookings and appointments
• Send appointment confirmations and reminders
• Process gift voucher purchases and deliveries
• Respond to your enquiries and provide customer support
• Improve our website and services
• Send marketing communications (only with your consent)
• Comply with legal obligations

4. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Essential Cookies: Required for the website to function properly
• Analytics Cookies (Google Analytics): Help us understand how visitors use our website
• Marketing Cookies (Meta Pixel): Used to deliver relevant advertisements

When you first visit our website, you will be asked to consent to our use of non-essential cookies. You can change your preferences at any time by clicking the "Cookie Settings" link in the footer.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To fulfil bookings and provide our services
• Consent: For marketing communications and non-essential cookies
• Legitimate Interest: To improve our services and respond to enquiries
• Legal Obligation: To comply with applicable laws

6. Data Sharing

We do not sell your personal information. We may share your data with:

• Service Providers: Third parties who help us operate our business (e.g., booking systems, email providers)
• Analytics Partners: Google Analytics and Meta (Facebook) for website analytics and advertising
• Legal Requirements: When required by law or to protect our rights

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Booking records: 7 years (for tax and legal purposes)
• Marketing consent records: Until consent is withdrawn
• Enquiry messages: 2 years

8. Your Rights

Under UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restrict Processing: Request limitation of how we use your data
• Data Portability: Request transfer of your data
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us using the details below.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any linked sites.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.