Privacy Policy

Last updated: 30 April 2026

The Village Beauty by Malvina ("we", "us", "our") is committed to protecting your personal data. This policy explains what we collect, why, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

The Village Beauty by Malvina
39 High Street, In The Gate, Corby, NN17 1UU
Email: [email protected]
Phone: 07716 485461

We are the data controller for the personal information we collect about you.

ICO registration: we process personal data only for the provision of beauty and skincare services to our clients (appointment booking, treatment records and follow-up care) and do not undertake activities that trigger mandatory registration under the Data Protection (Charges and Information) Regulations 2018. If our processing changes, we will register with the Information Commissioner's Office and update this policy with our registration number. You can verify any registration at ico.org.uk.

What we collect

• Contact details — your name, email, phone number, and any details you share when booking, enquiring, or following up on a treatment.
• Booking and treatment history — services booked, dates, and treatment notes (collected via our booking partner Booksy and stored to deliver safe, personalised care).
• Skin and health information — only what you choose to share during consultation, used to plan safe and effective treatments.
• Website data — basic technical information (IP address, device, browser) collected by our hosting provider Cloudflare for security and performance only.

Why we collect it (lawful basis)

• Contract — to manage your appointments, deliver treatments, and follow up.
• Legitimate interest — to keep our website secure, respond to enquiries, and improve our service.
• Consent — for any optional marketing or photos of treatment results (we will always ask first).
• Legal obligation — where we are required to retain records (for example, treatment consent forms).

How we share your data

We do not sell your data. We share it only with trusted providers who help us run the business:

• Booksy — for online appointment booking. See Booksy's privacy policy.
• Cloudflare — for website hosting and security.
• Google Maps — embedded map on our site (loads when you view the page).

How long we keep it

We keep treatment records for the period required for clinical and insurance purposes (typically up to 7 years). Enquiries we cannot fulfil are deleted within 12 months. You may ask us to delete your data sooner where there is no legal obligation to retain it.

Cookies

This site uses only essential cookies needed to make the booking flow function. We do not use advertising or tracking cookies. The Google Maps embed and Booksy booking widget may set their own cookies when you interact with them — see their respective privacy policies.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct or delete it.
• Restrict or object to how we use it.
• Withdraw consent at any time (where consent is the basis).
• Receive a copy of your data in a portable format.
• Complain to the Information Commissioner's Office (ICO) if you believe we have mishandled your data.

To exercise any right, email [email protected]. We will respond within 30 days.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes.

← Back to home