1. Introduction
Beauty and Skincare by Koulla Themistokleous ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website (www.koullabeauty.com) or use our services.
- Data Controller:
- Koulla Themistokleous
- Registration ID:
- 897086
- Email:
- (enable JavaScript to see the email)
2. Information We Collect
- Personal details you provide when booking an appointment (name, phone number, email address)
- Skin and health information relevant to your treatment (consultation forms)
- Payment information (processed securely; we do not store card details)
- Website usage data collected through cookies (see our Cookie Policy)
- Communication records (emails, messages)
3. How We Use Your Information
- To book and manage your appointments
- To provide personalised treatments and maintain treatment records
- To communicate with you about your bookings, offers, and updates
- To improve our website and services
- To comply with legal obligations
4. Legal Basis for Processing
We process your data based on:
- Your consent (e.g. marketing communications)
- Contract performance (e.g. booking and delivering treatments)
- Legitimate interest (e.g. improving our services)
- Legal obligation (e.g. maintaining health and safety records)
5. Data Sharing
We do not sell your personal data. We may share your information with:
- Payment processors to complete transactions
- Google Analytics for website analytics (anonymised data)
- Legal authorities if required by law
6. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Treatment records are kept for a minimum of 7 years. You may request deletion of your data at any time, subject to legal requirements.
7. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise your rights, contact us at (enable JavaScript to see the email).
8. Data Security
We implement appropriate security measures to protect your personal data against unauthorised access, alteration, or loss.
9. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on our website.
Last updated: September 2026
