How your details are looked after.

HouseofElle is [registered business name], run by Gabrielle. We decide how your information is used, which makes us the “controller” of it under UK data protection law.

• Email: [business email]
• Post: 87 High Street, Old Town Elise’s Studio, Hemel Hempstead, HP1 3AH
• Instagram: @houseofelle.ltd
• ICO registration number: [number from the ICO data protection fee]

• When you book: your name, mobile number, email address if you give one, the session, day and time you choose, and anything you write under “Anything Gabrielle should know”.
• Your health answers: your confirmation that you are 18 or over, not pregnant or breastfeeding, and don't have epilepsy or seizures, and the time you gave it. This is health information, which the law treats as special category data, so we only keep it with your explicit consent.
• At your session: notes about your treatment, such as your starting and finishing shade, and any photos of your teeth taken to record your shade.
• Payments: the price, how you paid (cash or bank transfer) and when. If you pay by bank transfer, your name and reference appear on our bank statement.
• Messages: the texts, WhatsApp or Instagram messages you send us.

Everything here comes from you. We don't buy information about anyone or collect it from other sources.

UK data protection law needs a reason for each use. Ours are:

• To take and manage your booking, confirm it, contact you about it, and carry out your session. This is needed to provide the service you asked for.
• To check the treatment is suitable for you, using your health answers. We rely on your explicit consent, which you give with the health tick box when you book. Keeping that record afterwards also lets us show we checked, if there is ever a question or a claim about your treatment. The law allows health information to be kept for that purpose.
• To take payment and keep our accounts, because tax law requires us to keep business records.
• To show photos of your results on our website or Instagram, only if you give us separate permission, which you can take back at any time.

We don't send marketing or offers unless you have asked to hear from us. We never sell your information or use it for advertising.

• HighLevel, the system we use to keep client contact details and to message you about your booking by text or WhatsApp. It receives your name, mobile number, email, session, appointment time and booking reference. It does not receive your health answers or your notes.
• Our website and booking system provider, which stores your bookings and session records for us and only uses them on our instructions.
• AI tools our website provider uses to run and look after the booking system, for example to pass your booking to HighLevel or to check and fix a problem. They may see your booking details while doing that, which can include your health answers and notes.
• Meta, if you message us on Instagram or WhatsApp. Those messages are also covered by Meta's own privacy policy.
• HMRC, and any accountant we use, but only payment records, and only where tax law requires it.

We don't share your information with anyone else unless the law requires us to.

Your bookings and health answers are handled and stored in the United States, by the company that runs our website and booking system. That transfer is covered by standard contractual clauses approved for UK data (the EU Standard Contractual Clauses with the UK's International Data Transfer Addendum), which legally bind the company to protect your information. The AI tools it uses are based in the United States as well.

HighLevel keeps the contact and booking details it receives in the United States too. It is certified under the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as protecting personal information to UK standards. HighLevel's own team in India may also access those details to provide its service and support, and HighLevel stays responsible for protecting them there, as its privacy policy and list of subprocessors explain.

You can ask us for a copy of these safeguards.

• Booking requests that don't go ahead: [suggested: deleted after 3 months].
• Your client record (bookings, health answers, notes and shade photos): [suggested: until 3 years after your last appointment], so we can answer any question or claim about your treatment. Then it is deleted, including from HighLevel.
• Payment records: as long as tax law requires, which is currently around six years.
• Photos you gave permission to share: until you ask us to stop using them.

You can ask us, free of charge, to:

• give you a copy of the information we hold about you
• correct anything that is wrong or out of date
• delete your information
• limit how we use it, or object to a use
• send your information to you or to someone else in a format you can reuse

You can withdraw your consent at any time, and it is as easy as giving it: just message us. If you take back consent for your health answers before your appointment, we won't be able to carry out the treatment, because we need to know it is suitable for you. Withdrawing doesn't affect anything we did before you asked.

To ask, email [business email] or message @houseofelle.ltd. We will reply within one month.

Please tell us first, and we will try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk/make-a-complaint.

• What you have to give us: we need your name, mobile number and health answers to book you in safely. Your email and notes are optional.
• No decisions by computer: Gabrielle reads and confirms every booking herself.
• Over-18s only: our sessions are for adults, so we don't knowingly collect information about anyone under 18.
• This website: it doesn't use cookies or tracking for visitors. If you turn on “Reduce motion”, that choice is saved in your own browser and never sent to us. Like any website, the service that delivers our pages sees your device's internet address to send them.
• Changes: if this notice changes, we'll update it here and change the date at the top.