Privacy Policy
Last updated: 2 February 2026
1. Who We Are
Katherine Vitoria (“we”, “us”, “our”) operates this website and provides beauty and aesthetic
services in the United Kingdom. Email: info@katherinevitoria.com
2. What Personal Data We Collect
• Name, email address, phone number
• Date of birth (for age verification and treatment suitability)
• Appointment and treatment information
• Health and consultation data (special category data)
• Website usage and analytics data
3. How We Use Your Data & Legal Basis
• To manage bookings and provide services (Contract)
• To ensure treatment safety (Explicit Consent)
• To meet legal and insurance obligations (Legal Obligation)
• To improve website performance (Consent)
4. Data Retention
Client and consultation records are kept for up to 7 years after your last treatment. Marketing data is
kept until consent is withdrawn.
5. Sharing Your Data
We only share data with trusted service providers such as booking systems, payment processors,
analytics services, and email platforms, all of whom comply with UK GDPR.
6. Cookies
Our website uses essential, analytics, and marketing cookies. Non-essential cookies are only used
after your consent via our cookie banner.
7. Your Rights
You have the right to access, correct, delete, restrict, or object to processing of your data, and to
withdraw consent at any time. You may lodge a complaint with the ICO.
8. Data Security
We apply appropriate technical and organisational measures to keep your data secure.
9. Updates
This policy may be updated periodically. The latest version will always be available on our website.