Privacy policy
Last updated: 01 August 2026
HEXIE Beauty respects your privacy and is committed to handling personal information fairly, lawfully and securely.
This Privacy Policy explains how personal information is collected, used, stored and shared when you visit the HEXIE Beauty website, make an enquiry, book or attend an appointment, complete a consultation or consent form, purchase a product or digital resource, or otherwise interact with HEXIE Beauty.
Who Is Responsible for Your Information?
HEXIE BEAUTY LIMITED
Trading as HEXIE Beauty
Company number: 15016177
Registered in England and Wales
Registered office: 9 Newbank Chase, Chadderton, Oldham, England, OL9 0LE
The registered office is the company's legal correspondence address and is not the HEXIE Beauty clinic location.
Information We May Collect
Depending on how you interact with HEXIE Beauty, personal information may include:
- your name and contact details;
- booking and appointment information;
- order, transaction and payment-related information;
- communications and enquiry history;
- information submitted through website chat, forms, social media, WhatsApp or SMS;
- skin concerns, treatment goals and skincare information;
- health, medical, medication, allergy and treatment-history information relevant to treatment suitability;
- pregnancy or breastfeeding information where relevant;
- clinical photographs or videos where required for treatment records;
- separate photography, marketing or social-media consent choices;
- website usage, device, browser, IP address and cookie information;
- delivery information where physical products are purchased; and
- other information you choose to provide.
Health & Special Category Information
Information concerning health is treated as special-category personal data under UK data protection law and requires additional protection.
HEXIE Beauty collects health-related information where it is relevant to consultation, treatment suitability, client safety, treatment planning, treatment records or related professional requirements.
Where special-category information is processed, HEXIE Beauty will identify an appropriate lawful basis and the additional condition required under applicable data protection law. Depending on the purpose and circumstances, this may include explicit consent.
If information necessary to assess treatment suitability cannot be provided or appropriately processed, HEXIE Beauty may be unable to provide treatment.
How We Collect Information
Personal information may be collected:
- when you make an enquiry or communicate with HEXIE Beauty;
- when you book or manage an appointment;
- when you complete the Client Consultation & Consent Form;
- during consultation or treatment;
- when you purchase through the website;
- through website technologies such as cookies and analytics;
- through official social-media accounts, website chat, WhatsApp or SMS; and
- through service providers involved in bookings, payments, orders or website operation.
How We Use Personal Information
Personal information may be used to:
- respond to enquiries;
- create, manage and confirm appointments;
- assess treatment suitability;
- provide and document treatments;
- provide preparation and aftercare guidance;
- contact you where clarification is required;
- process purchases, payments, refunds and deliveries;
- maintain appropriate treatment, business and transaction records;
- operate, protect and improve the website;
- prevent fraud, misuse and security incidents;
- comply with legal, regulatory, tax, insurance or professional requirements;
- establish, exercise or defend legal claims; and
- send marketing communications where permitted by law.
Lawful Bases
Depending on the purpose, personal information may be processed because:
- it is necessary to take steps at your request before entering into a contract or to perform a contract;
- there is a legal obligation;
- HEXIE Beauty has a legitimate interest that is not overridden by your rights and interests;
- you have provided consent; or
- another lawful basis applies.
Where consent is relied upon, you may withdraw that consent. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Consultation & Consent Forms
The HEXIE Beauty Client Consultation & Consent Form is currently hosted using Google services.
Information submitted through the form may therefore be processed or stored using Google systems in addition to HEXIE Beauty's own records.
Please provide complete and accurate information and avoid submitting information that is not relevant to your treatment or enquiry.
Shopify, Booking & Payment Services
The HEXIE Beauty online store is operated using Shopify. Shopify and associated payment providers may process information required to operate the website, manage orders, prevent fraud and process payments.
Appointment booking functionality may also be provided through BookX and associated service providers.
These providers process information according to their own applicable privacy terms and their arrangements with HEXIE Beauty.
Other Service Providers
Where reasonably necessary, personal information may be shared with service providers supporting HEXIE Beauty, including providers of:
- website and ecommerce services;
- appointment booking technology;
- payment processing;
- forms and cloud storage;
- website chat;
- analytics and cookie-management services;
- communications infrastructure;
- delivery and courier services;
- IT and security services;
- insurance;
- accounting, legal and professional services; and
- other services reasonably required to operate the business.
Social Media, WhatsApp & SMS
If you communicate with HEXIE Beauty through a social-media platform, WhatsApp, SMS or another third-party service, that provider may separately process information under its own privacy terms.
For new enquiries, HEXIE Beauty's preferred routes are website chat or an official social-media account.
WhatsApp or SMS is generally used where communication has already been established.
Clinical Photography
Clinical photographs or videos may be taken where relevant to assessment, treatment records or progress monitoring.
Permission to use photographs or videos publicly, including on the website or social media, is separate from clinical record keeping and requires the relevant consent.
Declining marketing or social-media photography does not prevent treatment where treatment can otherwise proceed appropriately.
Marketing
HEXIE Beauty may send marketing communications where you have consented or where otherwise permitted by law.
You may withdraw marketing consent at any time using the method provided with the communication or by contacting HEXIE Beauty.
Cookies & Website Technologies
The website may use cookies and similar technologies required for website operation, security, checkout, preferences, analytics and, where enabled and permitted, marketing.
Where required, non-essential technologies are controlled through the website's cookie or customer-privacy settings.
Some essential cookies are necessary for website, shopping basket, checkout or security functions.
International Data Transfers
Some technology providers used by HEXIE Beauty may process information outside the United Kingdom.
Where UK data protection law requires safeguards for an international transfer, HEXIE Beauty and/or the relevant provider will rely on an appropriate lawful transfer mechanism.
How Long We Keep Information
Personal information is retained only for as long as reasonably required for the purpose for which it is held.
Retention periods may take account of:
- treatment and client-record requirements;
- legal, accounting and tax obligations;
- insurance and professional requirements;
- the need to establish, exercise or defend legal claims;
- whether an ongoing client relationship exists; and
- requests for deletion where deletion is legally possible.
When information is no longer reasonably required, it will be deleted, anonymised or securely disposed of where appropriate.
Security
HEXIE Beauty takes reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.
No electronic system can be guaranteed to be completely secure.
Your Data Protection Rights
Depending on the circumstances, you may have rights including the right to:
- be informed about the use of your information;
- request access to personal information held about you;
- request correction of inaccurate information;
- request deletion in certain circumstances;
- request restriction of processing in certain circumstances;
- object to certain processing;
- request transfer of certain information;
- withdraw consent where consent is relied upon; and
- raise concerns about how your information is handled.
These rights are not absolute and may be subject to legal exceptions.
Making a Privacy Request
To make a privacy or data-protection request, use the HEXIE Beauty website chat or send a private message through an official HEXIE Beauty social-media account and state that your enquiry relates to privacy or personal information.
If you already have an established WhatsApp or SMS conversation with HEXIE Beauty, you may also use that conversation.
HEXIE Beauty may need to verify your identity before disclosing, amending or deleting personal information.
Please avoid sending unnecessary medical or other sensitive information through social-media messages.
Complaints
If you have concerns about how HEXIE Beauty has handled your personal information, please contact HEXIE Beauty first so the matter can be reviewed.
You also have the right to complain to the UK Information Commissioner's Office.
Visit the Information Commissioner's Office complaints service.
Changes to This Policy
This Privacy Policy may be updated where services, technology, legal requirements or data-handling practices change.
The current version will be published on the HEXIE Beauty website with its latest update date.