Privacy Policy

Effective Date: 12th May 2026

Welcome to Refined Radiance (“we”, “our” or “us”). We are committed to protecting your privacy and handling your personal data transparently and securely.

This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, contact us, or use our laser hair removal services. 

This policy is designed to comply with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Who We Are 

Refined Radiance

58 Church Ln, Warrignton, WA3 5DJ

info@refined-radiance.co.uk

For the purpose of data protection, we are the “data controller” of your personal data. 

2. Information We Collect

We may collect and process the following personal data.

Information You Provide

•  Full name
•  Email address
•  Phone number 
•  Billing and payment details
•  Appointment history 
•  Consultation forms
•  Medical or skin-related information relevant to treatment 
• Marketing preferences

Information Collected Automatically 

When you use our website, we may collect:

•  IP address 
•  Browser type 
•  Device information 
•  Pages visited 
•  Time spent on pages 
•  Referral source 
•  Cookies and analytics data

3. Special Category Data

Because laser hair removal treatments may involve health-related information, we may process ‘special category data’ such as: 

•  Skin conditions 
•  Medical history relevant to treatment 
•  Medications 
•  Contraindications 
• We only collect this information: 
•  With your explicit consent 
•  When necessary to provide safe treatment 
•  To comply with legal or insurance obligations 

4. How We Use Your Information 

We use your personal data to: 

•  Book and manage appointments 
•  Provide consultations and treatments 
•  Communicate with you about appointments 
•  Process payments 
•  Send service updates 
•  Improve our website and services 
•  Maintain treatment records 
•  Comply with legal and regulatory obligations 
•  Send marketing communications where you have consented

5. Legal Bases for Processing 

Under UK GDPR, we rely on the following lawful bases:

Providing treatments and appointments -

Contract

Maintaining treatment records -

Legal obligation 

Processing health information -

Explicit consent

Website analytics -

Legitimate interests

Marketing emails or SMS -

Consent 

6. Marketing Communications 

We may send promotional emails, offers, or updates if you have opted in to receive marketing communications. 

You can unsubscribe at any time by:

•  Clicking the unsubscribe line in emails
•  Contacting us directly 

7. Sharing Your Information 

We may share your information with trusted third parties including: 

•  Payment processors 
•  Appointment booking software providers 
•  Website hosting providers 
•  IT and security providers 
•  Legal or regulatory authorities where required 

All third-party providers are required to keep your data secure and confidential.

8. Data Protection 

We retain personal data only for as long as necessary to: 

•  Provide services
•  Maintain legal and insurance records
•  Resole disputes
•  Meet regulatory obligations 

Treatment records may be retained for several years in accordance with professional and insurance requirements.

9. Cookies and Analytics 

Our website may use cookies and similar technologies to:

•  Improve website functionality 
•  Analyse website traffic 
•  Remember your preferences 
•  Support advertising and remarketing 

We may use services such as: 

•  Google Analytics
•  Meta Pixel
•  Booking platform cookies 

You can manage cookie performances through your browser settings or our cookie banner. 

10. Your Rights Under UK GPDR

You have the right to: 

•  Access your personal data 
•  Correct inaccurate information 
•  Request deletion of your data 
•  Restrict processing 
•  Object to processing 
•  Withdraw consent at any time 
•  Request data portability 
•  Lodge a complaint with the UK 

Information Commissioner’s Office (ICO)

ICO Contact Information

Information Commissioner's Office

11. Data Security 

We implement appropriate technical and organisational measures to protect your personal data against: 

•  Unauthorised access
•  Loss
•  Misuse
•  Disclosure 
•  Alteration 

However, no internet transmission is completely secure. 

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. 

13. Children’s Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children. 

14. Changes to This Policy

We may update this Privacy Policy periodically. Any updates will be posted on this page with a revised effective data.