Privacy Policy

Who we are

This Privacy Policy applies to Eternal Beauty By B, a family-run Japanese head spa based in Darlington, County Durham, United Kingdom. Our website address is https://eternalbeautybyb.co.uk. Throughout this policy, “we”, “us” and “our” refer to Eternal Beauty By B. We are the data controller for the personal information you share with us.

What personal data we collect, and why

When you message us via Instagram, Facebook, or TikTok

We process the information you choose to share with us when arranging a booking: your name (or display name), the contact handle you message us on, the date/time you’d like to visit, and any notes about your treatment preferences or health concerns relevant to the booking. We use this information only to confirm and provide the treatment you’ve booked. The legal basis is performance of a contract (your booking).

Reviews you publish on third-party platforms

We may display reviews you’ve published on Facebook, Instagram, or Google as part of our homepage. We re-display only the content you’ve already made public, attributed to the name (or first name + initial) you used on the platform. If you’d like a review removed from our site, contact us and we’ll remove it within 7 days.

Cookies and analytics

We use a small number of cookies. The only one set without your consent is a record of your cookie preference itself. With your consent (via our cookie banner) we use Google Analytics to understand which pages visitors find useful and where they leave the site. Analytics data is anonymised at collection — we do not see your IP address or any personally identifying information. See our Cookie Policy for the full list.

How long we keep your data

Booking conversations on Instagram/Facebook/TikTok remain in those platforms’ message archives indefinitely unless you delete them on your end. We don’t export or copy them elsewhere. Cookie preference records last 12 months from your last decision. Analytics data is retained by Google for 14 months by default.

Who we share your data with

We don’t sell or share your personal data for marketing. The only third party that processes data on our behalf is Google(via Google Tag Manager and Google Analytics), and only if you’ve consented to analytics cookies. Google’s privacy policy applies to that processing.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct anything inaccurate.
• Ask us to delete your data (subject to any legal obligation to keep it).
• Object to or restrict how we use it.
• Withdraw your consent at any time (cookie preferences can be changed via the “Cookie preferences” link in the footer).

How to contact us

The easiest way to reach us is by direct message on Instagram, Facebook, or TikTok. For data-protection requests we’d prefer email — please contact us via DM first and we’ll share the appropriate address.

Complaints

If you’re unhappy with how we’ve handled your personal data and we haven’t been able to resolve it directly, you have the right to complain to the UK’s data-protection regulator:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk

Changes to this policy

We’ll update this page if our practices change. The date below shows when the policy was last revised. Material changes will be flagged in the cookie banner when you next visit.