PRIVACY POLICY

Last updated: 01/01/26

1. Introduction

Bright Nails is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website www.brightnails.co.uk
or interact with us.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Bright Nails is the data controller responsible for your personal data.

If you have any questions regarding this Privacy Policy or how we handle your personal data, you can contact us at:

Bright Nails
Website: www.brightnails.co.uk

Telephone: 01525 379602
Email: manager@brightnails.co.uk

3. What Personal Data We Collect

We may collect, use, store, and transfer the following types of personal data:

Identity Data

• Name
• Company name (if applicable)

Contact Data

• Email address
• Telephone number
• Billing or delivery address

Technical Data

• IP address
• Browser type and version
• Time zone setting
• Device information
• Website usage data

Transaction Data

• Details of products purchased
• Payment and delivery information

Communication Data

• Messages sent through our contact forms or customer enquiries

4. How We Collect Your Data

We collect data in several ways:

• When you fill out forms on our website
• When you place an order
• When you contact us by phone or email
• When you subscribe to marketing communications
• Automatically through cookies and analytics tools when you browse the website

5. How We Use Your Personal Data

We only use your personal data where permitted by law. Most commonly, we use your data for:

• Processing and delivering orders
• Managing customer accounts
• Responding to enquiries
• Providing customer support
• Improving our website and services
• Sending service updates or marketing communications (where permitted)

6. Legal Basis for Processing

Under UK GDPR we rely on the following legal bases:

Contractual necessity
To process and deliver your orders.

Legitimate interests
To operate, maintain, and improve our business and services.

Legal obligation
To comply with tax, accounting, and regulatory requirements.

Consent
For certain marketing communications where required.

7. Sharing Your Data

We may share your data with trusted third parties who assist us in operating our business, including:

• Website hosting providers
• Payment processors
• Delivery and courier companies
• IT and system administration providers
• Analytics providers (such as Google Analytics)

We require all third parties to respect the security of your personal data and treat it in accordance with the law.

We do not sell or rent your personal data to third parties.

8. International Data Transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses or equivalent legal protections.

9. Data Retention

We only retain personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.

For example:

• Order and financial records may be retained for up to 6 years for tax and accounting purposes.
• Enquiry data may be retained for up to 12 months.

10. Your Data Protection Rights

Under UK data protection law you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Object to processing
• Request transfer of your data (data portability)

If you wish to exercise any of these rights, please contact us using the details above.

11. Right to Complain

If you believe your data has been handled improperly, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
https://www.ico.org.uk

However, we would appreciate the opportunity to address your concerns before you contact the ICO.

12. Data Security

We have implemented appropriate technical and organisational security measures designed to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure.

13. Cookies

Our website uses cookies to improve your browsing experience and analyse website traffic.

You can control cookies through your browser settings. For more information, please see our Cookie Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page.