Privacy Policy for Fox & Doe

 

​​

Last updated: 11 October 2026

At Fox & Doe, we respect your privacy and are committed to protecting your personal information. This policy explains how we collect, use, store and protect your information when you visit our website, make an enquiry or book one of our services.

​

​

1. Who We Are

​

Fox & Doe is a sole-trader business based in Cheltenham, Gloucestershire, offering lash and brow treatments, bridal makeup and occasion makeup.

Fox & Doe is the data controller responsible for the personal information collected in connection with its services.

Email: hello@foxanddoe.co.uk
Website: www.foxanddoe.co.uk

​

​

2. Information We Collect

​

Depending on the services you enquire about or book, we may collect:

• Your name, contact details and date of birth

• Booking details, appointment history and payment records

• Relevant health information, allergies, medications and contraindications

• Consultation forms, patch test results and treatment notes

• Information about your treatment preferences and requirements

• Photographs or videos of treatment results, where applicable

• Information you provide through enquiries, consultations or correspondence

We only request health information relevant to treatment suitability, safety and expected results.

Our treatments are available to clients aged 18 and over, or from age 16 with parental or guardian consent, in accordance with our insurance requirements.

​

​

3. How We Collect Your Information

​

We collect personal information through:

• Our website and online enquiry forms

• Fresha bookings and digital consultation forms

• Email, telephone, messaging and social media enquiries

• In-person consultations, patch tests and appointments

• Payment and booking administration

Completed consultation forms and treatment records may be stored electronically within Fresha client profiles.

​

​

4. How We Use Your Information

​

We use your personal information to:

• Respond to enquiries and manage appointments

• Provide treatments and manage payments

• Assess treatment suitability and identify contraindications

• Record patch tests, allergies and treatment history

• Tailor services to individual needs and preferences

• Send appointment confirmations, reminders and relevant aftercare information

• Maintain appropriate business, insurance and financial records

• Use photographs or videos for marketing where permission has been given

We do not sell your personal information to third parties.

​

​

5. Our Legal Basis for Processing

​

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and applicable UK data protection legislation.

Depending on the purpose, we rely on:

• Contractual necessity: To manage bookings and provide requested services.

• Legal obligations: To comply with applicable accounting, tax and other legal requirements.

• Legitimate interests: To administer our business, respond to enquiries and maintain appropriate records, where these interests do not override your rights.

• Consent: For activities such as optional promotional photography and marketing where consent is required.

​

Health Information

Health information is classified as special category personal data under UK GDPR.

Where we rely on explicit consent, we request this separately through our consultation forms.

We use relevant health information to assess treatment suitability, identify allergies or sensitivities and provide treatments safely.

You may withdraw your consent by contacting us. Withdrawal does not affect processing already carried out lawfully, and certain records may be retained where another lawful basis and applicable legal condition permit this.

If we cannot process health information necessary to assess treatment suitability, we may be unable to provide certain services.

​

​

6. How We Store and Protect Your Information

​

We take reasonable steps to protect personal information against unauthorised access, loss or misuse.

Digital consultation forms and client records are stored through Fresha.

Treatment photographs and patch test forms are stored locally on a password-protected iPad, with access restricted to Fox & Doe.

We only access and use personal information where necessary for providing our services and managing client records.

​

​

7. Third-Party Service Providers

​

We use trusted third-party providers to operate our business, including:

• Fresha: Appointment management, client records, consultation forms and payment processing.

• Wix: Website hosting, online enquiries, website analytics and cookie management.

• Monzo: Payment processing and financial administration.

We may also share relevant information with professional advisers, insurers or authorities where necessary or legally required.

These providers process information in accordance with their respective privacy and security arrangements.

Some providers may process information outside the United Kingdom. Where UK GDPR restricted-transfer rules apply, appropriate safeguards must be used.

​

​

8. How Long We Keep Your Information

​

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, insurance and professional record-keeping requirements.

• Consultation forms, treatment notes and patch test records: Retained for seven years following the last treatment. For clients under 18, records are retained for seven years from their 18th birthday, or longer where required by law or our insurer.

• Financial and transaction records: Retained for the applicable statutory accounting and tax periods.

• Enquiries and correspondence: Retained only for as long as reasonably necessary for the enquiry or ongoing client relationship.

• Photographs and videos: Retained and used in accordance with the permissions provided and applicable data protection requirements.

Information is securely deleted or anonymised when no longer required.

​

​

9. Photography & Marketing

​

We may take photographs or videos to document treatment results.

We will only use identifiable client photographs or videos for promotional purposes, including our website, social media and marketing materials, where appropriate permission has been obtained.

Photography consent is entirely optional and declining will not affect your treatment.

You may withdraw your permission for future marketing use by contacting us. We will also consider requests to remove previously published material where reasonably possible.

​

​

10. Cookies & Website Analytics

​

Our website uses essential cookies to function correctly and optional cookies to understand website traffic and improve the visitor experience.

Non-essential cookies are managed through our Wix cookie consent banner, allowing visitors to accept, reject or adjust their preferences.

We use Wix Analytics to understand website performance. Visitors who decline analytics cookies may not be included in our traffic reports.

​

​

11. Your Data Protection Rights

​

Under UK GDPR, you may have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of information, where applicable

• Restrict or object to certain processing

• Request transfer of your information, where applicable

• Withdraw consent where processing is based on consent

To exercise your rights, please contact us using the details below.

​

​

12. Changes to This Privacy Policy

​

We may update this Privacy Policy to reflect changes to our services, systems or legal requirements.

The latest version will always be available on our website.

​

​

13. Contact Us

​

For questions about this Privacy Policy or how your personal information is handled, please contact:

Fox & Doe
Cheltenham, Gloucestershire, United Kingdom
Email: hello@foxanddoe.co.uk
Website: www.foxanddoe.co.uk