Privacy Policy

ILLAF Beauty Bar ("we", "us", "our") operates from 2-4 Great Eastern St, London EC2A 3NW, United Kingdom. You can contact us by phone on +44 7908 100793 or via our Contact page.

• Booking information: name, email, phone number, selected treatment, specialist, appointment date/time and any notes you provide.
• Account & order data: contact details, delivery address, order history and payment confirmation (we never store full card details).
• Communications: messages sent via WhatsApp, phone or our contact forms, and marketing preferences.
• Technical data: cookies and analytics data used to improve the site.

• To confirm and manage your appointments and send reminders.
• To process orders, deliveries and returns.
• To respond to enquiries and provide aftercare advice.
• To send marketing communications only where you have given consent.
• To meet legal, tax and regulatory obligations.

We process your data under the UK GDPR on the basis of your consent, the performance of a contract (your booking or order), and our legitimate interests in running the business and providing client care.

We share data only with trusted processors needed to deliver your booking or order (for example our booking, payment and delivery partners), and where required by law. We never sell your data.

We retain personal data only for as long as necessary to provide our services and meet legal requirements. Treatment and consent records are kept for the period required by law, after which they are deleted or anonymised.

You have the right to access, correct, delete or restrict the use of your data, to object to processing, to withdraw marketing consent at any time, and to request a copy of your data. To exercise any of these rights, contact us using the details above.

We use cookies for site functionality and analytics. You can manage your preferences via the cookie banner. See our Cookie Policy for details.

We apply appropriate technical and organisational measures to protect your data, including encrypted payment processing and access controls. No method of transmission is fully secure, but we work to safeguard your information.

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.