1. Who we are

Muhwa Korean Beauty is a trading name of HYCROSMA LTD, a company registered in England and Wales. Our studio is located at Lock Studios, Studio LK.409, 7 Corsican Square, London E3 3YD. For any data protection queries, please contact us at info@muhwa.co.uk.

2. What data we collect

When you book a treatment, make an enquiry, or use our website, we may collect the following personal data: your name, email address, phone number, treatment history and preferences, payment information (processed securely via Fresha), and any health or skin information you provide during consultations. We may also collect technical data such as your IP address, browser type, and pages visited through cookies and similar technologies.

3. How we use your data

We use your personal data to manage your bookings and provide treatments, communicate with you about appointments and enquiries, process payments securely, personalise your treatment experience based on your skin concerns and history, send you marketing communications where you have given consent, comply with legal and regulatory obligations, and improve our website and services.

4. Lawful basis for processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your personal data on the following lawful bases: contract performance (to fulfil your booking and provide treatments), legitimate interests (to manage our business, improve services, and maintain client relationships), consent (for marketing communications, which you can withdraw at any time), and legal obligation (to comply with applicable laws and regulations).

5. Third-party services

We use the following third-party services which may process your data: Fresha (booking management and payment processing), Squarespace (website hosting), and FormSubmit (contact form submissions). Each of these providers has their own privacy policies and we encourage you to review them. We do not sell, rent, or trade your personal data to any third parties for marketing purposes.

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Booking and treatment records are retained for up to 6 years in line with HMRC requirements and potential legal claims under the Limitation Act 1980. Marketing consent records are retained until you withdraw consent. You may request deletion of your data at any time, subject to our legal obligations.

7. Your rights

Under UK GDPR, you have the right to access the personal data we hold about you, rectify any inaccurate or incomplete data, request erasure of your data (the "right to be forgotten"), restrict or object to certain processing, request data portability, and withdraw consent for marketing at any time. To exercise any of these rights, please contact us at info@muhwa.co.uk. We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies and similar technologies to ensure proper functionality, analyse website traffic, and improve your browsing experience. You can control cookie preferences through your browser settings. Essential cookies are required for the website to function and cannot be disabled.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment processing is handled securely through Fresha's PCI-compliant systems.

10. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at info@muhwa.co.uk.