Privacy policy
What information is collected when you book or have a treatment, why it is needed, and what happens to it afterwards.
Last updated 24 July 2026
Who we are
Iyesha Leanne SPMU & Beauty is the data controller for the information described on this page. The studio is at The Beauty House, 609a Wakefield Road, Tandem, Huddersfield HD5 9XP.
For anything to do with your information, email Iyeshabest.pmu@outlook.com or call 07584 560450.
What is collected
Depending on how you get in touch, the following may be collected:
- Your name, phone number and email address, so an appointment can be arranged and confirmed.
- Health information given at consultation. This covers relevant medical history, medications, allergies, skin conditions, and whether you are pregnant or breastfeeding.
- Patch test records and the pigments used, which are kept for your safety and for future appointments.
- Photographs of the treated area, taken before, immediately after, and sometimes once healed.
- Booking and payment records, including deposits.
- Anonymous website statistics, which do not identify you.
Health information
Health information is treated as special category data under UK GDPR, which means it gets stricter protection than ordinary contact details.
It is collected because cosmetic tattooing is not suitable for everyone, and some conditions and medications affect healing, bleeding or how pigment settles. It is used only to decide whether a treatment is safe for you and to carry it out properly.
The lawful basis is your explicit consent, given on the consultation form. You can withdraw that consent at any time, though it may mean a treatment cannot go ahead.
Photographs
Photographs are taken to record the work, to compare healing, and, where you agree separately, to show on the website, the gallery or social media.
Consent for treatment records and consent for publication are two different things. Agreeing to one does not agree to the other, and you can say yes to a photograph being kept on file and no to it being published.
If you have agreed to publication and later change your mind, say so and the image will be removed. Anything already shared elsewhere by other people cannot always be recalled, but it will come off anything within her control.
Why it is used, and the lawful basis
Information is used to arrange and carry out your appointment, to keep the records required of a licensed cosmetic tattooing business, to answer your questions, and to run the business.
- Performing a contract, for arranging and delivering the treatment you have booked.
- Legal obligation, for records that must be kept under local authority licensing and for tax and accounting.
- Legitimate interests, for running the business day to day and keeping it secure.
- Explicit consent, for health information and for publishing photographs.
Who it is shared with
Your information is never sold, and it is not shared for anyone else's marketing. It is handled by the following, acting on instructions:
- The online booking and calendar system, which processes appointments, reminders and deposits.
- The website host, which serves this site.
- The website analytics provider, which measures visits without identifying anybody.
- An accountant, for financial records.
Information may also be disclosed to the insurer in the event of a claim, to Kirklees Council in connection with licensing, or where the law requires it.
How long it is kept
Treatment and consultation records, including health information and patch test results, are kept for as long as the insurer and licensing conditions require, and no longer than necessary after that.
Financial records are kept for six years, as required for tax.
Contact details for anyone who has asked to hear about offers are kept until you unsubscribe.
Photographs are kept for as long as you are a client, and removed from publication on request.
Your rights
Under UK GDPR you can:
- Ask for a copy of the information held about you.
- Ask for anything inaccurate to be corrected.
- Ask for information to be deleted, subject to records that must legally be kept.
- Object to, or ask to restrict, certain uses.
- Withdraw consent at any time, including consent to publish photographs.
Ask by email or phone. There is no charge, and you will get a reply within one month.
Cookies
This website does not use tracking or advertising cookies, and there is no cookie banner because none is needed.
Website statistics are collected in a way that does not identify individual visitors and does not follow anyone across other websites.
The booking page and the treatment form both load a widget from a third party, which may set cookies of its own in order to work. Those two pages are the only ones on the site where that happens.
Complaints
If something is wrong, say so directly first and it will be sorted out.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.
Changes to this policy
This policy will be updated if how information is handled changes. The date at the top shows when it was last revised.