Privacy & Cookie Policy

1. Who we are

MMM Beauty is a nail, brow and skin studio based in Brackley, UK. We provide salon services and related products, including digital gift cards and online booking.

2. Information we collect

We may collect the following types of information:

• Contact details – such as your name, email address, phone number and postal address.
• Booking information – services booked, appointment dates and times, and notes relevant to your treatment.
• Payment details – processed securely by our payment providers (for example, card details entered through our booking or payment system). We do not store full card numbers on our own systems.
• Communication history – messages and emails you send to us, and responses we send to you.
• Website usage data – IP address, browser type, pages visited and interactions with our website, collected through cookies and similar technologies.
• Marketing preferences – whether you have chosen to receive updates, news or offers from us.

3. How we use your information

We may use your information to:

• Manage and confirm your appointments and bookings.
• Provide treatments and services safely and effectively.
• Send appointment reminders, confirmations and important updates.
• Process payments and manage deposits, refunds or fees.
• Improve our website, services and client experience through analytics and feedback.
• Send newsletters or marketing communications where you have opted in.
• Comply with legal obligations, such as record-keeping and responding to lawful requests.

4. Legal basis for processing (UK GDPR)

We rely on one or more of the following legal bases:

• Contract – to provide the services you have booked and manage your appointments.
• Legitimate interests – to improve our services, manage our diary, and communicate important information about your bookings.
• Consent – for certain types of marketing communications and non-essential cookies, where required.
• Legal obligation – to comply with applicable laws and regulations.

5. How we share your information

We do not sell or rent your personal data to third parties.

We may share your information with trusted service providers who help us run our business:

• Square – We use Square for payment processing, appointment bookings, and our loyalty program. Square processes your payment information securely, manages our booking calendar, and stores your booking history and loyalty points data. Square's privacy policy applies to how they handle your payment and booking data.
• Clerk – We use Clerk for user authentication and account management. If you create an account, Clerk handles sign-in verification codes sent to your email or phone, and securely stores your account profile information (name, email, phone). Clerk's privacy policy applies to how they handle your authentication data.
• Resend – We use Resend to send booking confirmation emails and contact form notifications. Resend processes your email address to deliver these messages.
• Analytics providers – We use Google Tag Manager, Google Analytics 4, Meta Pixel, PostHog, and Sentry to understand how visitors use our website, diagnose technical errors, and improve reliability. These services collect anonymised or masked usage data through cookies and similar technologies. See section 8 for more details on cookies.

These providers only process your data on our instructions and are required to keep it secure and confidential. Each provider has their own privacy policy that governs how they handle your data.

We may also disclose information if required by law, regulation, or in response to a valid request from a public authority.

6. Data retention

We retain your personal data only for as long as necessary to:

• provide our services,
• maintain accurate treatment and booking records, and
• satisfy legal, accounting or reporting obligations.

When data is no longer needed, it will be securely deleted or anonymised.

7. Your rights

You have the right to:

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your data where it is no longer needed, or object to certain types of processing.
• Withdraw consent for marketing at any time.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

To exercise your rights, please contact us using the details on our Contact page.

8. Cookies & similar technologies

Our website uses cookies and similar technologies to:

• remember preferences and improve your browsing experience,
• understand how visitors use the site,
• support basic functionality and security.

Analytics cookies: We use the following analytics services that set cookies:

• Google Tag Manager & Google Analytics 4 – Tracks page views and user interactions to help us improve our website.
• Meta Pixel – Helps us measure the effectiveness of our advertising and understand how visitors interact with our site.
• PostHog – Provides session recordings, product analytics, and behavioural insights to help us understand how visitors use our site and improve the booking experience. All session recordings are masked by default.
• Sentry – Captures performance diagnostics, masked replay on sampled browser sessions, and error reports so we can investigate broken journeys without storing raw contact details, booking notes, or payment credentials.
• reCAPTCHA v3 – Used on our contact form to protect against spam and abuse. This service may set cookies to analyse your interactions.

Some cookies are essential for the site to function. Others (such as analytics cookies) are optional and require your consent. We use Google Consent Mode v2 to manage cookie consent, which means analytics cookies are only set after you accept them.

You can manage cookies:

• via our cookie preference banner (where available), and
• through your browser settings. Please note that disabling certain cookies may affect how the site functions.

9. Updates to this policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website.

By using our website or booking with us, you agree to your information being used as described in this policy.