What happens to anything you tell me.

This is the plain-English version, and it is the whole of it. Beautyybyjessicaa is run by Jessica as a sole trader in Middleton, Leeds, and she is the data controller for anything you send.

There are five things on this website you can fill in — a booking, the consultation form, an after-treatment feedback form, a review, and an account — and they are handled differently, so each is set out below.

• Booking: when you book online, your name, phone number, email address and — for a mobile visit only — the address Jessica is coming to are stored in the website's own diary so the appointment exists and the slot is held. Anything you type into "anything I should know" is stored with it. It is kept for 12 months after the appointment and then deleted automatically.
• Paying: the card details are typed on Stripe’s own page, not this one. No card number ever touches this website, and Stripe tells it only that a payment succeeded and for how much. Stripe is the payment processor and holds that transaction under its own privacy policy.
• The consultation form: your name, phone number, email address, the treatments you are interested in, and the health information the form asks for (pregnancy, pacemakers or implanted devices, allergies, medication, recent skin treatments, skin conditions, previous reactions and whether you have had a patch test). It is emailed to Jessica and to nobody else.
• Where those answers go depends on whether you have an account. Without one they are emailed and nothing more — not saved to this website, not written to your browser. With one, a copy is kept on your account so it is already filled in next time, and you can delete it whenever you like by closing the account.
• The feedback form after a treatment: whatever you choose to write, emailed to Jessica. You do not have to give your name, and the form works perfectly well without it. Nothing is stored on the website.
• An account, if you choose to make one: your email address, and whatever name, phone number and address you save into it. It exists to save you filling the same boxes in every time and to show you what you have booked. You never need one — booking as a guest works exactly the same and always will.
• Signing in: a code is emailed to you, or a password if you have set one. A password is stored only as a PBKDF2 hash and cannot be read back, by Jessica or by anybody else. Signing in puts one cookie in your browser — see below.
• A review: a review is published, so treat it as public. What is stored and shown is your first name and one initial, the treatment, the rating and the words you wrote — the name is shortened on the way in, so a full name cannot end up on the page even if you type one. The email address is optional, is passed to Jessica in the notification so she can reply, and is never stored or shown. Ask and any review comes down.
• Why any of it: to arrange and carry out your appointment, to decide whether a treatment is safe and suitable for you, and to keep the diary straight. Nothing else. It is never used for marketing, never sold, and never shared beyond the services named here.
• Who sees it: Jessica. Email is delivered by Resend and the diary and reviews are stored on Cloudflare, both over encrypted connections — they handle the data on her behalf and do nothing else with it.
• How long: bookings for 12 months after the appointment, then deleted automatically. Emails for up to 12 months, so a repeat appointment is not started from scratch, then deleted. An account and the consultation answers on it stay until you delete them, which you can do yourself at any time from the account page — there is a button, it takes one press, and it is immediate. Reviews stay until you or Jessica take them down. Insurance requires treatment records to be kept longer; those live in Jessica's own records, offline.
• Cookies: one, and only if you sign in. There is a page of its own about it — see the cookie policy.
• Your rights: if you have an account you can see and change most of this yourself, and delete all of it in one press. Otherwise you can ask what is held about you, ask for it to be corrected, or ask for it to be deleted, and it will be done. Ask by message or email. If you are ever unhappy with how your data has been handled you can complain to the Information Commissioner’s Office at ico.org.uk.

Beautyybyjessicaa is the trading name of Jessica, a sole trader working from Middleton, Leeds and travelling to clients across south Leeds. Qualified to VTCT Beauty Therapy Level 2 and VTCT Beauty Therapy Level 3, with public liability and treatment insurance in place.

Not VAT registered, so no VAT is charged on anything and no VAT number applies.

To reach a person about any of this — including anything about your own data — email beautyybyjessicaa@gmail.com, message 07575 301527, or use any of the ways on the contact page. A postal address is given on request; the treatment room is a family home, which is why it is not printed here.