Last modified 15th February 2023
We protect your personal data in line with the requirements of the General Data Protection Regulation (GDPR). The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights to access, update or delete.
The data controller responsible for this website is Leah Andreas Beauty.
This website contains links to third-party websites, which have their own data controllers and privacy policies. This privacy policy applies only to this website.
For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.
The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us. In some cases you can also exercise your rights through automated systems, as described at the relevant points in this privacy policy.
The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access. We use Transport Layer Security (TLS, also known as SSL) to encrypt any data you supply to us through our website. Additional technical measures are described at the relevant points in this privacy policy.
In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.
We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.
Cookies are small pieces of text that are stored by your browser. Each cookie has a name and is associated with a particular site. When your browser sends a request to a site (for example, to download a page, image, or video), the computer that responds (known as a server) may tell your browser to set one or more cookies. When your browser makes further requests to the same site it sends the cookies back to the server. This allows the server to remember you as you browse the site, and provide features such as shopping baskets or password-protected areas.
Cookies are small pieces of text that are stored by your browser. Each cookie has a name and is associated with a particular site. When your browser sends a request to a site (for example, to download a page, image, or video), the computer that responds (known as a server) may tell your browser to set one or more cookies. When your browser makes further requests to the same site it sends the cookies back to the server. This allows the server to remember you as you browse the site, and provide features such as shopping baskets or password-protected areas.
You can block all cookies through your browser settings (see the instructions for Chrome, Firefox, Safari and Edge), but if you choose to do so some features on our site will no longer work.
We provide on/off switches on this page to let you enable and disable individual features that use cookies. Please note that if you disable a feature the associated cookies will still be stored by your browser until they expire, but the feature will no longer be loaded and it will not have access to the cookies.
First-party cookies are set when you interact with our site. Your browser will only send these cookies in requests to our site.
PHPSESSID
This is a short-term Session cookie which is set on every page of this website and remains empty unless you use a contact form or booking form. This cookie expires when you close the browser or navigate away from this website, or after 20 minutes, whichever scenario happens first.
These cookies are necessary for our site to work correctly. You can block these cookies through your browser settings, but if you choose to do so some features will no longer work.
w_c
This cookie is used to remember your cookie preferences. It is created when you change your cookie preferences and expires after thirty days.
These cookies are used by Google Analytics to track visitor interaction with our site in order to produce statistical reports for us. These cookies are created once you accept cookies on our site. For more information, see the Google Analytics section of our privacy policy.
_ga
This cookie is used to distinguish each visitor. It expires after two years.
_gid
This cookie is used to distinguish each visitor. It expires after one day.
_ga_JTGX1L54GH
This cookie is used to limit the number of requests sent to Google. It expires after one minute.
Third-party cookies are created by functionality and content on our site that are supplied by other providers. Your browser will send these cookies in requests to the provider of the functionality or content, which may allow the provider to track you across multiple sites.
Our site is served through Cloudflare. Cloudflare helps our site load faster by storing copies of our content in data centres around the world, and defends our site from attacks by logging requests to detect and block suspicious traffic. For more information on how Cloudflare handles the data it collects, see Cloudflare’s privacy policy.
Lawful basis for processing: Compliance with a legal obligation
Why? To comply with the GDPR obligation to implement appropriate technical measures to protect data
We use Google Analytics to track visitor interaction with our site in order to produce statistical reports. Google collects details of the pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Google handles the data it collects, see Google’s privacy policy.
To opt out of Google Analytics tracking on our site, see Privacy Settings. To opt out of Google Analytics tracking on all sites, use the Google Analytics Opt-out Browser Add-on.
Lawful basis for processing: Pursuance of our legitimate interests
Why? To allow us to analyse how visitors interaction with our site in order to improve our site and our services
When you view a page containing the YouTube video player, your browser connects to YouTube. For more information on how Google (the operator of YouTube) handles the data it collects, see Google’s privacy policy.
To manage the privacy settings on this website, please click the Privacy Settings button at the bottom of every page of the website.
