Privacy Policy – The Rose Room

Last updated: 3 November 2026

At The Rose Room, I respect your privacy and take the protection of your personal information seriously. This policy explains what information I collect, why I collect it, how it is stored and how your information is protected.

1. Who is responsible for your information?

The Rose Room is responsible for the personal information collected in connection with its beauty treatments and services.

If you have any questions about this policy or how your information is used, you can contact me at:

Email: info@the-rose-room.co.uk

2. What information do I collect?

Depending on the treatment you receive, I may collect the following information:

  • Your name and contact details.
  • Your date of birth, where relevant.
  • Medical history and existing health conditions.
  • Allergies and sensitivities.
  • Medication and other information relevant to your suitability for treatment.
  • Treatment notes and relevant consultation information.

Some of this information, particularly medical history and allergies, is classed as special-category personal data under UK GDPR and therefore requires additional protection.

3. Why do I collect your information?

Your information is collected to:

  • Check that treatments are suitable and safe for you.
  • Identify any allergies, sensitivities or contraindications.
  • Make informed decisions about your treatment.
  • Maintain appropriate client consultation and treatment records.
  • Contact you where necessary regarding your appointment or treatment.

I only request information that is relevant to providing safe and appropriate treatments.

4. Your consent

Before collecting medical or other sensitive information, I ask you to provide explicit consent through a separate consent tick box on your consultation form.

Your information is used only for the purposes explained in this policy.

You can withdraw your consent at any time by contacting me. Please be aware that withdrawing consent may mean I am unable to provide certain treatments safely.

Withdrawing consent does not affect the lawfulness of processing carried out before your withdrawal.

5. How is your information stored?

All client consultation and treatment forms are completed and stored electronically using Jotform.

The Rose Room uses Jotform’s EU data centre option for storing submitted forms.

Jotform is a third-party service provider which processes information on behalf of The Rose Room. Its own privacy policy and data-processing arrangements also apply.

Your information will not be sold or used for unrelated marketing purposes.

I take reasonable steps to protect your personal information and prevent unauthorised access, loss or disclosure.

6. How long is your information kept?

Completed client consultation and treatment forms are retained for two years after your last treatment.

After this period, your information will be securely deleted unless there is a legitimate legal reason to retain it for longer, such as an ongoing complaint or legal claim.

7. Will your information be shared?

Your personal information will not be shared or sold for marketing purposes.

Information may be shared with service providers who help operate the business, such as Jotform, where necessary to provide their services.

Information may also be disclosed where legally required or where necessary in connection with a legal claim.

8. Your rights

Under UK data protection law, you have rights regarding your personal information. These include the right to:

  • Request a copy of the personal information held about you.
  • Ask for inaccurate information to be corrected.
  • Request deletion of your information in certain circumstances.
  • Request that the use of your information is restricted.
  • Withdraw consent where consent is the basis for processing.
  • Raise concerns about how your information is handled.

To exercise any of these rights, please email info@the-rose-room.co.uk.

9. Complaints

If you have concerns about how your personal information is being handled, please contact me in the first instance so that I can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Website: https://ico.org.uk/

10. Changes to this policy

This Privacy Policy may be updated from time to time to reflect changes to the business, the information collected or data protection requirements.

The latest version will always be available on The Rose Room website.

Thank you for trusting The Rose Room with your personal information.