Privacy Policy
Last updated: September 2026
The Estera pmu LTD
10 Beauchamp Place, 2nd Floor
London, SW3 1NQ
Email: Info@theestera.co.uk
Telephone: 07400 011150
At The Estera pmu LTD, we respect your privacy and take the protection of your personal information seriously.
This Privacy Policy explains what personal information we may collect, why we collect it, how we use and protect it, and the rights you have in relation to your information.
It applies when you visit our website, contact us, make an enquiry, book an appointment or receive a treatment from The Estera.
1. Information We May Collect
Depending on how you interact with The Estera, we may collect and process information including:
Personal details
-
Your name
-
Telephone number
-
Email address
-
Date of birth or age, where required
-
Contact details
Appointment information
-
Treatments booked
-
Appointment dates and times
-
Booking history
-
Cancellations and rescheduling information
-
Treatment preferences
-
Relevant communications relating to your appointment
Treatment and consultation information
To determine whether a treatment is appropriate and safe for you, we may need to collect information relating to:
-
Your health and medical history
-
Medications
-
Allergies
-
Skin conditions
-
Previous permanent makeup
-
Previous aesthetic or laser treatments
-
Relevant contraindications
-
Treatment history
-
Information you provide during consultations
-
Pre-treatment and aftercare information
Some of this information may constitute special category personal data under UK data protection law. Where required, we will only process this information where we have an appropriate lawful basis and an additional condition for processing special category data.
Photographs
With appropriate permission, photographs may be taken before, during or after treatment for purposes such as:
-
Maintaining treatment records
-
Monitoring treatment progress
-
Comparing results
-
Supporting future treatment decisions
We will seek appropriate permission before using identifiable client photographs for separate promotional or marketing purposes, such as our website or social media.
Payment information
When you make a booking or payment, payment information may be processed by the relevant booking or payment provider.
The Estera may receive information about the transaction, such as whether payment was successful, the amount paid and the service purchased.
We do not need to publish or claim that The Estera directly stores complete card details unless this has been confirmed.
Website information
When you visit our website, certain technical information may be collected, which could include:
-
IP address
-
Device type
-
Browser type
-
Pages visited
-
Website interactions
-
Cookie preferences
The exact information collected will depend on the services, cookies and analytics tools enabled on the website.
2. How We Collect Your Information
We may collect information when you:
-
Visit our website
-
Complete an enquiry or contact form
-
Contact us by telephone, email or WhatsApp
-
Book an appointment
-
Use our online booking provider
-
Attend a consultation
-
Receive a treatment
-
Provide photographs
-
Communicate with us before or after treatment
-
Provide feedback or a review
We may also receive information through third-party services that you choose to use when interacting with The Estera, such as an online booking or payment provider.
3. How We Use Your Information
We may use your personal information to:
-
Respond to enquiries
-
Arrange and manage appointments
-
Provide treatments and consultations
-
Assess treatment suitability
-
Maintain appropriate client and treatment records
-
Provide pre-treatment and aftercare information
-
Contact you about an existing appointment
-
Process or administer payments
-
Manage cancellations, rescheduling and deposits
-
Respond to questions or complaints
-
Maintain the safety and security of our services
-
Meet applicable legal, regulatory, insurance or professional requirements
-
Improve our website and services
-
Send marketing communications where permitted and where the necessary consent or other lawful basis applies
We will only use personal information for appropriate and lawful purposes.
4. Our Lawful Basis for Using Your Information
UK data protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, The Estera may rely on:
Contract
Where processing your information is necessary to arrange or provide a treatment, administer your booking or fulfil our agreement with you.
Legal obligation
Where we need to process or retain information to comply with a legal requirement.
Legitimate interests
Where processing is reasonably necessary for the operation and protection of our business, provided those interests do not override your rights and interests.
Consent
Where you have freely given us permission to use your information for a particular purpose.
Where consent is our lawful basis, you may withdraw that consent.
5. Health and Medical Information
Information concerning your health may receive additional protection under UK data protection law.
The Estera may need relevant health information to assess whether a permanent makeup or laser treatment is suitable and safe.
This may include information about medical conditions, medication, allergies, skin conditions and previous treatments.
We will only collect information that is relevant to the treatment or service being provided and will apply an appropriate UK GDPR condition for processing this information.
Because the exact legal basis used by the business for its health records should reflect its actual consultation and record-keeping process, this section should be confirmed before the policy goes live.
6. Client Photographs
Treatment photographs may form part of your client or treatment record where appropriate.
We may use these photographs to:
-
Record your condition before treatment
-
Monitor healing or treatment progress
-
Compare treatment results
-
Assist with future treatment planning
Using identifiable photographs publicly is different from keeping photographs as part of a private treatment record.
Where appropriate permission is required, we will obtain it before using identifiable photographs for:
-
The Estera website
-
Social media
-
Advertising
-
Promotional materials
-
Portfolios or other public marketing
You can ask us about how a particular photograph is being used by contacting us.
7. Online Booking
The Estera may use an external booking platform to manage appointments.
When you book through an external provider, that provider may collect and process personal information in accordance with its own privacy policy.
The Estera may receive information necessary to manage your appointment, such as your:
-
Name
-
Contact details
-
Selected treatment
-
Appointment date and time
-
Booking status
-
Relevant payment information
If Fresha is confirmed as the final booking system, I would name Fresha specifically here and link to its privacy information.
8. Payments
Payments may be processed through third-party payment providers.
These providers may process information required to authorise and complete your payment.
The Estera may retain transaction records where required for accounting, booking administration and legal purposes.
9. WhatsApp, Email and Telephone
If you contact The Estera through WhatsApp, email or telephone, we may process the information you provide to respond to your enquiry and manage your relationship with us.
Please only provide information that is relevant to your enquiry or treatment.
Where you send photographs through WhatsApp, for example photographs of existing permanent makeup or tattoos, they may contain personal information and will be handled accordingly.
10. Who We May Share Information With
We do not sell your personal information.
Where necessary, information may be shared with organisations that help us operate the business, such as:
-
Website providers
-
Booking providers
-
Payment processors
-
IT and technical service providers
-
Professional advisers
-
Accountants
-
Insurers
-
Regulators or public authorities where legally required
These organisations may process information on our behalf or, in some circumstances, act as independent data controllers.
We only share information where there is an appropriate reason to do so.
11. International Data Transfers
Some technology, website, booking or payment providers may process information outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards must be used where required by UK data protection law.
Once you know exactly which Wix, Fresha, payment, analytics and marketing services she is using, this section can be made more specific.
12. How Long We Keep Your Information
We will not keep personal information for longer than reasonably necessary for the purpose for which it was collected, subject to any legal, insurance, accounting, professional or regulatory requirements that apply.
Different types of information may need to be retained for different periods.
When information is no longer required, it will be securely deleted or otherwise disposed of where appropriate.
I would not put an invented "we retain all information for seven years" statement here unless she confirms that this is genuinely her record-retention practice.
13. Keeping Your Information Secure
The Estera takes reasonable steps to protect personal information against:
-
Unauthorised access
-
Loss
-
Misuse
-
Disclosure
-
Alteration
-
Destruction
Access to client information should be limited to those who reasonably need it for legitimate business or treatment purposes.
14. Cookies and Website Analytics
Our website may use cookies and similar technologies to operate correctly, remember preferences, understand website usage or support other website functionality.
Some cookies are essential for the website to work.
Other cookies or similar technologies may require your permission before they are used.
The ICO requires organisations to provide clear information about cookies and similar technologies, and prior consent is generally required where an applicable exemption does not apply. (ICO)
You should therefore configure the Wix cookie banner properly rather than relying on this Privacy Policy alone.
The website should ideally offer clear choices such as:
ACCEPT
REJECT NON-ESSENTIAL
MANAGE PREFERENCES
Non-essential technologies that require consent should not be activated before the appropriate consent has been obtained. (ICO)
15. Marketing Communications
Where permitted, The Estera may contact you with information about treatments, services, appointments or offers.
Where consent is required, marketing communications will only be sent after obtaining the necessary consent.
You can withdraw your consent or unsubscribe from marketing communications at any time.
Stopping marketing communications will not prevent us from sending necessary service messages relating to an appointment you have booked.
16. Your Data Protection Rights
Depending on the circumstances, UK data protection law may give you rights in relation to your personal information.
These may include the right to:
-
Ask for access to personal information we hold about you
-
Ask us to correct inaccurate or incomplete information
-
Ask us to delete your information in certain circumstances
-
Ask us to restrict how we use your information in certain circumstances
-
Object to certain processing
-
Request transfer of certain information where applicable
-
Withdraw consent where we rely on consent
The availability of individual rights depends on the circumstances and the lawful basis being used.
The ICO recommends that privacy notices explain people's information rights and how they can raise concerns. (ICO)
To make a request, contact:
17. Complaints
If you have concerns about how The Estera has handled your personal information, please contact us first so we can investigate your concern.
The Estera pmu LTD
10 Beauchamp Place, 2nd Floor
London, SW3 1NQ
Email: Info@theestera.co.uk
Telephone: 07400 011150
You also have the right to raise a concern with the Information Commissioner's Office, the UK's data protection regulator.
Information Commissioner's Office
18. Third-Party Websites
Our website may contain links to external websites or services, including booking, social media, map or payment services.
Those organisations operate their own websites and privacy practices.
We encourage you to review their privacy information when providing personal information through those services.
19. Changes to This Privacy Policy
We may update this Privacy Policy where our services, technology, legal obligations or use of personal information changes.
The latest version will be published on this website with an updated revision date.
20. Contact Us
If you have a question about this Privacy Policy or how your personal information is handled, please contact:
The Estera pmu LTD
10 Beauchamp Place, 2nd Floor
London, SW3 1NQ
Email: Info@theestera.co.uk
Telephone: 07400 011150