Privacy Policy
Last updated: September 2026
At The Beam Room Berkshire, your privacy is important to me. This Privacy Policy explains what personal information I collect, why I collect it, how I use and protect it, who it may be shared with and the rights you have over your information.
This policy applies when you visit my website, contact me, book an appointment, complete a consultation or receive treatment from The Beam Room Berkshire.
1. Who I Am
The Beam Room Berkshire provides professional laser hair removal services.
For the purposes of UK data protection law, The Beam Room Berkshire is the data controller responsible for determining how and why your personal information is used.
Business: The Beam Room Berkshire
Owner: Suzanne Nugent
Email: thebeamroomberkshire@gmail.com
Business address: 48 Qualitas, Bracknell, Berkshire, RG12 7QG
If you have any questions about this Privacy Policy or how I handle your personal information, please contact me using the details above.
2. What Information I Collect
The information I collect depends on how you interact with The Beam Room Berkshire and may include:
Your name, address and contact details
Your date of birth
Appointment and booking information
Information you provide when contacting me
Consultation and patch test information
Health and medical information relevant to your suitability for treatment
Details of medications, allergies or sensitivities
Information about your skin, hair and treatment areas
Treatment history, settings and treatment notes
Payment and transaction information
Communications between you and The Beam Room Berkshire
Marketing preferences
Information submitted through my website
Technical information about how you use my website
I only collect information that is relevant and reasonably necessary for the purposes for which it is being used.
3. Health, Consultation and Treatment Information
As part of your consultation and treatment journey, I need to collect certain information to assess whether laser hair removal is suitable for you and to provide your treatment safely and appropriately.
This may include information about your health and medical history, medications, allergies or sensitivities, skin and hair characteristics, previous treatments, relevant lifestyle factors such as sun exposure, and information relating to your consultation, patch test and ongoing treatments.
Health information is classed as special category personal data under UK data protection law and receives additional protection.
Your consultation, medical and treatment-related records are stored within Timely, the system I use to manage client records and appointments.
I only collect health information that is relevant to assessing your suitability, providing your treatments and maintaining appropriate treatment records. This information is treated confidentially and is not used for unrelated purposes.
4. My Lawful Basis for Using Your Information
Under UK data protection law, I need an appropriate lawful basis for collecting and using your personal information.
For personal information that is necessary to arrange and provide my services, I rely primarily on:
Article 6(1)(b) – Contract
This allows me to process personal information where it is necessary to take steps at your request before providing a service or to fulfil the service you have requested.
Where I process health or medical information, I additionally rely on:
Article 9(2)(a) – Explicit Consent
I ask for your explicit consent to process relevant health and medical information as part of my consultation process.
You can withdraw your consent to the processing of your special category health information at any time by contacting me. However, because certain health information is necessary for me to assess your suitability for laser hair removal and provide treatment safely, withdrawing your consent may mean that I am unable to provide or continue treatment.
Withdrawing consent does not affect the lawfulness of processing carried out before your consent was withdrawn.
For other activities, such as complying with legal obligations or operating and protecting my business, another appropriate lawful basis may apply.
Where marketing communications require your consent, I will ask for this separately. Marketing consent is not a condition of receiving treatment.
5. How I Use Your Information
I may use your personal information to:
Respond to enquiries
Arrange and manage appointments
Carry out consultations and patch tests
Assess your suitability for laser hair removal
Provide and manage your treatments
Maintain appropriate consultation and treatment records
Monitor your treatment journey
Provide pre-treatment and aftercare information
Contact you about appointments or treatment
Process payments and maintain transaction records
Meet legal, regulatory, insurance and accounting requirements
Operate, maintain and improve my website
Understand how visitors use my website
Protect the security of my business and systems
Send marketing communications where you have chosen to receive them
I will not use your personal information for an unrelated purpose without an appropriate lawful basis for doing so.
6. Online Bookings, Consultations and Timely
I use Timely to manage online bookings, appointments, consultations and client records.
When you make a booking or become a client of The Beam Room Berkshire, personal information may be collected and stored within Timely.
Depending on your interaction with me, this may include:
Your name and contact details
Appointment and booking information
Consultation forms
Health and medical information relevant to your treatment
Patch test information
Treatment records and history
Treatment settings and notes
Appointment-related communications and reminders
Marketing preferences, where applicable
Timely processes client information as part of the services it provides to The Beam Room Berkshire.
For personal information relating to my clients that Timely processes on my behalf, The Beam Room Berkshire remains responsible for determining why that information is collected and how it is used.
Further information about how Timely handles personal information can be found in the Timely Privacy Policy.
7. Payments, TimelyPay and Stripe
I use TimelyPay to process payments relating to appointments and treatments. TimelyPay uses Stripe as part of its payment-processing services.
When you make a payment, information necessary to process and secure the transaction may be processed by TimelyPay, Stripe and other organisations involved in completing the payment.
This may include your name, transaction information and payment information.
I do not receive or store your complete payment card details where these are processed securely through the payment provider.
Stripe may also process certain personal information for its own purposes, including security, fraud prevention and compliance with legal and regulatory requirements.
Further information about how payment information is handled can be found in the relevant Timely and Stripe privacy policies.
8. My Website and Squarespace
The Beam Room Berkshire website is hosted by Squarespace.
When you visit my website, certain information may be processed through Squarespace. Depending on the features you use and your cookie preferences, this may include information about your browser, device and network, IP address, pages visited and how you interact with the website.
Squarespace may also process information you choose to submit through website forms or other website features.
I use this information where appropriate to operate and maintain my website, respond to enquiries and understand how the website is being used.
Further information about how Squarespace handles personal information can be found in the Squarespace Privacy Policy.
9. Squarespace Analytics
I use Squarespace Analytics to understand how visitors find and use my website.
Depending on your cookie choices, this may include information about visits to the website, pages viewed and interactions with the site.
I use this information to understand which parts of my website are useful to visitors and to help me improve the website and the information I provide.
Where consent is required, non-essential analytics cookies will only be used after you have made your choice through the website's cookie banner.
You can manage your preferences through the cookie settings available on my website.
10. Email Marketing
I use Squarespace Email Campaigns for email marketing.
If you choose to receive marketing communications from The Beam Room Berkshire, I may use information such as your name, email address and marketing preferences to send you occasional news, updates, information and offers relating to my services.
Marketing communications are separate from essential communications about your appointments and treatments.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included within the email or by contacting me.
Where marketing is based on consent, withdrawing that consent will not affect your ability to book or receive treatment.
11. Cookies
My website uses cookies and similar technologies.
Some cookies are necessary for the website to function correctly and securely. Other cookies may help me understand how visitors use my website and improve their experience.
Where consent is legally required, non-essential cookies will only be used after you have made your choice.
You can manage your preferences through the cookie settings available on my website.
Further information about the cookies used on my website can be found in my Cookie Policy.
12. Who I Share Information With
I do not sell your personal information.
Where necessary, personal information may be processed by or shared with trusted organisations that help me operate The Beam Room Berkshire, including:
Timely – appointment management, consultations and client records
TimelyPay and Stripe – payment processing
Squarespace – website hosting, website functionality, analytics and email marketing
Professional advisers, such as accountants or legal advisers
Insurers, where necessary
Regulators, authorities or other organisations where I have a legal obligation to provide information
I only share personal information where there is an appropriate reason for doing so and only to the extent necessary for the relevant purpose.
13. International Transfers
Some of the technology and service providers I use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data protection law.
These may include adequacy regulations, approved contractual safeguards or other legally recognised mechanisms designed to protect personal information when it is transferred internationally.
14. How Long I Keep Your Information
I only keep personal information for as long as it is reasonably necessary for the purpose for which it was collected and to meet any legal, regulatory, insurance, accounting or professional requirements that apply to my business.
Client consultation, medical and treatment records are retained for 7 years following your last treatment or interaction with The Beam Room Berkshire, unless there is a legal, regulatory or insurance requirement for me to retain them for longer.
Financial and transaction records will be retained for the period required to meet applicable accounting and tax obligations.
General enquiries and communications will only be kept for as long as reasonably necessary to deal with your enquiry and any appropriate follow-up.
If you subscribe to marketing communications, I will retain the information needed to manage your marketing preferences until you unsubscribe or withdraw your consent. I may retain limited information after you unsubscribe where necessary to ensure your preference not to receive marketing communications is respected.
Where I rely on explicit consent to process special category health information, you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before it was withdrawn and does not necessarily require me to delete information that I am required or otherwise permitted by law to retain.
When personal information is no longer required, it will be securely deleted or disposed of as appropriate.
15. Keeping Your Information Secure
I take appropriate steps to protect the personal information I hold against unauthorised access, accidental loss, misuse, alteration or disclosure.
I also use established third-party systems to help manage bookings, client records, payments, website services and communications.
Access to personal information is limited to where it is needed for legitimate business purposes.
While no system can guarantee absolute security, I take the protection and confidentiality of client information seriously.
16. Your Data Protection Rights
Depending on the circumstances, UK data protection law gives you a number of rights in relation to your personal information.
These may include the right to:
Ask for access to the personal information I hold about you
Ask for inaccurate or incomplete information to be corrected
Ask for your personal information to be deleted in certain circumstances
Ask me to restrict the use of your information in certain circumstances
Object to certain ways your information is being used
Ask for certain information to be provided to you or transferred to another organisation
Withdraw consent where I rely on consent to process your information
Object to direct marketing
Not every right applies in every circumstance.
If you would like to exercise any of these rights, please contact me using the contact details at the beginning of this Privacy Policy.
17. Making a Complaint
If you have any questions or concerns about how I handle your personal information, please contact me first and I will do my best to resolve your concern.
You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.
Further information about your data protection rights and how to make a complaint can be found on the ICO website.
18. Third-Party Websites
My website may contain links to other websites or services, including my online booking system.
The Beam Room Berkshire is not responsible for the privacy practices of third-party websites. If you follow a link to another website or service, I recommend reviewing that organisation's privacy information to understand how it handles your personal information.
19. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my business, services, technology or legal requirements.
The latest version will always be available on The Beam Room Berkshire website, with the date of the most recent update shown at the top of this policy.