Cup & Glow by Lona (“we”, “us”) is a women-only massage, cupping and aesthetic studio on Ash Road, Bebington, Wirral CH63 8PH. We are the data controller for personal information we collect. Contact: cupglowbylona@gmail.com or 07365 244400.
This policy explains how we handle personal data under the UK GDPR and the Data Protection Act 2018. It is written for this studio. It is not the default WordPress comment policy.
What we collect
- Identity and contact details you give us: name, mobile number, email address, and any notes you send by WhatsApp, text, phone or email.
- Booking details: treatment type, date, time, first-visit offers such as GLOW20, and whether you are happy to attend a women-only studio.
- Health information you choose to share so we can treat you safely (for example pregnancy, skin conditions, blood-thinning medication, or reasons you should not have cupping). We only ask for what we need for the appointment.
- Website technical data: IP address, browser type and pages viewed, stored in hosting logs for security. We do not run a marketing pixel on this site.
- If you open the map on the Contact page, Google may process data under Google’s privacy policy.
Why we use it
We use your information to take and run bookings, answer questions, send appointment reminders, meet health-and-safety duties, keep accounts, and improve the website. Lawful bases are usually contract (your booking), legitimate interests (running a small studio and keeping the site secure), and consent where you ask us to message you on WhatsApp or Instagram. Special-category health data is used only with your consent, or where needed to protect your vital interests in an emergency.
Who we share it with
We do not sell your data. We share it only with:
- Our website host (Rocket.net) and content delivery network, so the site can load.
- Our email provider (Postmark), so login and studio emails can be sent from noreply@cupglow.co.uk.
- Fresha, which runs the studio diary. Bookings, cancellations and reschedules are made on Fresha. Fresha then processes the booking under its own terms.
- Professional advisers or insurers if a claim or legal duty requires it.
- The police or regulators if the law requires us to.
Some providers store data in the UK or EEA. If a provider uses another country, we rely on a lawful transfer tool such as the UK International Data Transfer Agreement or adequacy regulations.
Cookies
This public website does not use advertising cookies. WordPress may set a necessary cookie if you log in to the studio admin area. The Google Maps embed on the Contact page may set cookies from Google. You can block cookies in your browser; the map may then not display.
How long we keep it
Booking and enquiry records are kept for as long as needed to complete the appointment and for up to six years afterwards for accounting and insurance, unless the law requires longer. Health notes for a one-off visit are kept only as long as needed for that treatment and any follow-up you book. Hosting logs are rotated by the host. You can ask us to delete information that we are not required to keep.
Your rights
You can ask for a copy of your data, have it corrected, object to or restrict some uses, and in many cases have it erased. You can withdraw WhatsApp or marketing consent at any time. Email cupglowbylona@gmail.com. You can complain to the Information Commissioner’s Office at ico.org.uk.
Children
The studio is for adults (18 and over) unless we agree otherwise in writing. We do not knowingly collect data from children through this website.
Changes
We will update this page if our practices change. The date at the top will change when we do.