Privacy Policy **Last updated: 8 September 2026** This Privacy Policy explains how Moonlight Nail collects, uses and protects your personal information when you visit our website, contact us, book an appointment or use our salon services. It applies to: **moonlightnail.co.uk** **book.moonlightnail.co.uk** and related online services operated by Moonlight Nail. ## 1. Who we are Trading as **Moonlight Nail** 2 Queens Parade, Ironmarket Newcastle-under-Lyme ST5 1RW United Kingdom Telephone: **07348 389 678** Moonlight Nail is the data controller for the personal information covered by this Privacy Policy. ## 2. Information we collect Depending on how you use our services, we may collect: Your name, telephone number and email address. Appointment details, including services, date, time and preferred technician. Booking, cancellation and appointment history. Payment and deposit information. Messages or information you send to us. Consultation or treatment-related information where necessary to provide a service safely. Technical information needed to operate and protect our websites, such as IP address, browser or device information and security logs. We only collect information that is reasonably necessary for providing and managing our services. ## 3. How we use your information We use personal information to: Manage appointments and salon services. Send booking confirmations, reminders and appointment updates. Process deposits, payments and refunds. Maintain appropriate customer and treatment records. Respond to enquiries, complaints or disputes. Maintain the security and reliability of our systems. Prevent fraud or misuse. Meet accounting, tax, insurance and other legal requirements. Send marketing where we have an appropriate lawful basis to do so. We do not sell your personal information. ## 4. Our lawful bases We normally process booking and appointment information because it is necessary to take steps at your request or provide the service you have booked. We may process information where necessary to comply with legal obligations, including accounting and tax requirements. We may rely on our legitimate interests where necessary to operate and protect our business, maintain appropriate service records, prevent fraud or deal with complaints and legal claims. Where consent is required, including for certain marketing or health-related information, we will ask for it separately. You may withdraw consent at any time where our processing is based on consent. ## 5. Payments and Stripe We use **Stripe** to process certain online deposits and payments. Payment card information is processed securely by Stripe. Moonlight Nail does not need to store your full card details within its normal booking records. We may retain transaction information such as the amount paid, payment status, date, payment reference and information required for refunds, accounting or dispute handling. Stripe processes personal information in accordance with its own privacy practices. Stripe Privacy Policy: https://stripe.com/gb/privacy ## 6. Appointment communications If you provide a telephone number or email address, we may use it to send information relating to your appointment, including: Booking confirmations. Appointment reminders. Changes or cancellations. Payment or deposit information. These are service communications and are separate from promotional marketing. ## 7. Marketing Providing your contact details to make a booking does not automatically mean that you agree to receive marketing. Where consent is required for marketing, we will request it separately. Where applicable law allows us to contact existing customers about similar services, you can opt out at any time. Opting out of marketing does not stop necessary booking or service communications. ## 8. Who we share information with We may use trusted service providers to operate our business, including providers of: Payment processing. Website hosting. Secure database and booking infrastructure. Email or messaging services. IT security and system maintenance. We may also disclose information to accountants, insurers, professional advisers, regulators, courts or public authorities where reasonably necessary or legally required. Service providers receive only the information reasonably required for the services they provide. ## 9. International transfers Some technology providers may process information outside the United Kingdom. Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards required by UK data protection law are in place. ## 10. How long we keep information We keep personal information only for as long as reasonably necessary. Appointment, consultation and treatment-related records may be retained for up to **6 years** where required for insurance purposes or for the establishment, exercise or defence of legal claims. Financial and accounting records are retained for the period required by applicable UK tax and accounting rules. Marketing information is retained until you unsubscribe or it is no longer reasonably required. Technical and security information is normally kept for a shorter period unless it is required to investigate a security incident or dispute. When information is no longer required, we will delete or anonymise it where appropriate. ## 11. If you ask us to delete your information You may ask us to delete personal information we hold about you. Where we no longer need the information, we will delete or anonymise it where appropriate. However, the right to erasure is not absolute. We may retain information where it remains reasonably necessary to comply with legal, tax or insurance obligations or for the establishment, exercise or defence of legal claims. Information retained for these purposes will not be used for unrelated marketing. ## 12. Security We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure. Access to customer information and administrative systems is restricted to authorised users. ## 13. Cookies Our websites may use cookies or similar technologies that are necessary for security, booking functions, payments and basic website operation. Where we use non-essential cookies or tracking technologies that require consent, we will ask for your permission before they are used. ## 14. Your rights Under UK data protection law, depending on the circumstances, you may have the right to: Access the personal information we hold about you. Ask us to correct inaccurate information. Ask us to delete information. Ask us to restrict certain processing. Object to certain uses of your information. Withdraw consent where processing is based on consent. Object to direct marketing at any time. Some rights are subject to legal exceptions. To exercise your rights, please contact Moonlight Nail using the details above. We may need to verify your identity before providing or changing personal information. ## 15. Complaints If you have concerns about how we use your personal information, please contact Moonlight Nail first so that we can investigate. You also have the right to complain to the **Information Commissioner's Office (ICO)**, the UK data protection regulator. https://ico.org.uk/make-a-complaint/ ## 16. Changes to this Privacy Policy We may update this Privacy Policy when our services, technology providers or legal obligations change. The latest version will always be published on our website.