Draft for review — not yet checked by a solicitor; needs sign-off by Richard & Julie before launch.
Who we are
Bed Light & Beyond, 41 Brecknock Road, London, N7 0BT. Contact: info@bedlightandbeyond.com / +44 (0) 20 7916 0211. We are the data controller for the personal data described below.
What we collect
When you book a session, take out a membership, or complete our Registration & Health Declaration, we collect:
- Contact details: name, email, phone, emergency contact.
- Date of birth, to confirm you meet our 18+ age requirement.
- Health information you choose to disclose on the registration form — for example whether you are pregnant, taking photosensitising medication, have epilepsy, or have a history of skin cancer or a serious skin condition.
- Booking and membership history, and payment records handled via our booking/payment provider.
Health data — special category data
Information about your health is “special category data” under UK GDPR. We only ask for it, and only use it, to assess whether a service is safe and suitable for you and to let our team adapt your session — for example flagging a contraindication to red light therapy or tanning. We collect it with your explicit consent, given when you tick the consent boxes on the registration form. You can withdraw consent at any time by contacting us, though we may need to decline or adapt certain services if we no longer hold the information needed to run them safely.
How we use your data
- To provide and tailor Red Light Therapy, Premium Tanning and Meditation & Life Coaching sessions safely.
- To manage bookings, memberships and payments.
- To contact you about your booking or membership (e.g. confirmations, reminders, rescheduling).
- To meet our legal and insurance obligations around client health and safety records.
We do not use your health information for marketing, and we do not sell your personal data.
Who we share it with
We share data only where needed to run the studio: our booking/CRM system, our payment processor, and (for website hosting and email) our technology providers. We do not share your health information with any of these beyond what’s needed to deliver your session safely, and we never share it for marketing purposes.
How long we keep it
We keep registration and health declaration records for as long as you remain a client, and for a limited period afterwards to meet insurance and legal record-keeping obligations, after which it is securely deleted.
Your rights
You can ask us to access, correct, delete, or provide a copy of your personal data, and you can withdraw consent to hold health information at any time. Contact info@bedlightandbeyond.com to make a request. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you’re unhappy with how we’ve handled your data.
Cookies
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
Embedded content from other websites
Pages on this site may include embedded content (e.g. maps, videos). Embedded content from other websites behaves in the exact same way as if you had visited that other website directly, and that site may collect data about you and use its own cookies.
Children
Our services are for adults aged 18 and over, and we do not knowingly collect personal data from children.