01Who we are
This website and our booking system are run by Himalayan Beauty Limited, trading as Himalayan Beauty, 11 St Stephen's Green, Dublin 2, company number 569551. We decide how your details are used, which makes us the “data controller” under the GDPR. Questions about your details go to info@himalayanbeauty.com, or call us on 01 224 7018.
02What we collect
- When you book: your name, email, mobile number, the treatments and times you choose, and anything you write in the notes.
- When you pay: the amount, the date and a reference from Stripe or PayPal. Your card details go straight to them; we never see or keep them.
- When you buy a gift card: your name, email and (if you give it) mobile number, and the recipient's name, email and the message you write.
- Consultation forms: the answers you give about your health before some treatments, and your signature.
- Reviews: your star rating, what you write and, if you agree to it being shown, the name you choose.
- My account: when you sign in, the email you use and when you signed in; and anything you send us from it, such as a request to change a booking or new allergy details.
- Booking for someone else: their name, and their health forms and treatment notes, kept as theirs. You get the emails about their bookings.
- Waitlist: your first name, email, and the day and treatments you're waiting for, until that day has passed. We delete them a month later.
- In the salon: notes our team makes about your treatments and preferences, so every visit suits you.
- Security: your internet address, briefly, to stop people guessing gift card codes or flooding our forms.
If you book through Treatwell, Treatwell passes your booking to us. What Treatwell does with your details is covered by its own privacy policy.
03Why we use it
- To provide what you asked for (your booking, your treatment, your gift card, confirmations, reminders and refunds). The legal basis is our contract with you.
- To keep accounts, as Irish tax law requires. The legal basis is our legal obligation.
- To ask how your visit went, by one email after a visit. This is in our legitimate interest in improving what we do, and every email has a link to stop them.
- To send you offers and news by email, only if you tick the box to agree when you book or buy a gift card, or tell our team you'd like them. The legal basis is your consent. We keep a record of when and where you agreed. Every offer email has an unsubscribe link that works straight away, and you can also ask us to stop at any time.
- To show your review on our website, only if you tick the box to agree. You can ask us to take it down at any time.
- To keep the website safe and prevent fraud, in our legitimate interest and yours.
We never sell your details or use them for advertising, and we don't track whether you open our emails.
04Health details
Allergies, medical conditions or pregnancy can change which treatments are safe for you, so we sometimes need to know about them. Health details are special category data under the GDPR, and we only keep them with your explicit consent: you give it by ticking the box when you write them in your booking notes, or by signing a consultation form.
Only our team can read them, and consultation form answers are stored encrypted. You can withdraw your consent at any time by contacting us; we will then delete them, though we may not be able to offer some treatments without them.
05Who we share it with
We share your details only with the companies that help us run the salon, and only what each one needs:
- Stripe and PayPal, to take payments and give refunds.
- Google, whose Gmail service sends our emails.
- Our hosting provider, whose servers run this website and the booking system.
They act on our instructions and must keep your details safe. Some of them may handle data outside the European Economic Area, for example in the US. When they do, they use the safeguards EU law requires, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
We may also have to share details with An Garda Síochána, Revenue or a court when the law requires it.
06How long we keep it
- Bookings, payments and gift cards: six years, as Irish tax law requires.
- Consultation forms: kept while you are visiting us, and deleted when you ask.
- Reviews: until you ask us to remove them.
- Internet addresses used for security: deleted within a day.
07Your rights
Under the GDPR you can ask us, free of charge, to:
- give you a copy of the details we hold about you;
- correct anything that's wrong;
- delete your details, unless the law says we must keep them (for example, payment records for tax);
- stop or limit how we use them, or object to our using them;
- send them to you, or to another business, in a common format;
- withdraw any consent you gave, at any time.
Email info@himalayanbeauty.com or ask us in the salon. We reply within one month. If you're unhappy with how we handle your details, you can complain to the Data Protection Commission at dataprotection.ie.
08Keeping it safe
Our website only works over a secure connection. Our team signs in with their own accounts and sees only what their role needs, and changes to customer records are logged. The website sets only the cookies it needs to work, as our cookie policy explains.
09Changes to this policy
If we change how we use your details, we'll update this page and, for important changes, tell you by email. Last updated 10 October 2026.
