Last updated: September 2026

At The Light Salon, we respect your privacy and are committed to looking after your personal information.

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have in relation to your personal information.

Who We Are
The Light Salon Limited is responsible for the personal information we collect and use and is the data controller for the purposes of applicable UK data protection law.

This policy applies when you interact with The Light Salon, including when you:

• Visit The Light Salon at Selfridges London;
• Book or receive a treatment;
• Complete a consultation or consent form;
• Purchase a product, gift card or membership;
• Visit our website;
• Contact our salon or customer service team;
• Sign up to receive communications from us; or
• Otherwise interact with The Light Salon.

If you have any questions about this policy or how we use your personal information, please contact us at customerservice@thelight-salon.com.

Information We Collect
epending on how you interact with us, we may collect:

Contact and account information
Such as your name, email address, telephone number, date of birth and booking details.

Appointment and treatment information
Such as your appointments, treatment history, therapist notes, treatment preferences and treatment packages.

Consultation and health information
Where necessary to determine whether a treatment is appropriate for you, we may ask you to provide relevant information about your health, medication, pregnancy, allergies, skin conditions or other factors that could affect your treatment.

We only ask for information that we reasonably need to provide your treatment safely and appropriately.

Purchase and payment information
We may collect information about products, gift cards or memberships you purchase from us.

Payments are processed securely by Stripe, our payment provider. The Light Salon does not receive or store your full payment card details. Your payment information is handled by Stripe in accordance with its own privacy and security practices.

Communications
Information you provide when you contact us by email, telephone, through our website, social media or another communication channel.

Marketing preferences
Including whether you have chosen to receive marketing communications from us and your communication preferences.

Website information
When you use our website, we may collect information about how you access and use it, including through cookies and similar technologies. Further information and the choices available to you can be found through our website cookie settings.

How We Use Your InformationWe use your personal information where necessary to:

• manage your appointments and bookings;
• provide treatments and services;
• assess whether treatments are appropriate for you;
• maintain relevant treatment and consultation records;
• communicate with you about your appointments, including confirmations, reminders and changes;
• administer treatment packages, memberships and gift cards;
• process purchases and payments;
• respond to questions, requests or complaints;
• provide customer service;
• maintain and improve our services and client experience;
• manage our business and maintain appropriate business records;
• protect our clients, staff and business;
• comply with our legal, regulatory and insurance obligations; and
• send you marketing communications where permitted and in accordance with your preferences.

Our Legal Basis for Using Your Information

UK data protection law requires us to have a lawful reason for collecting and using your personal information.

Depending on the circumstances, we may use your information because:

• it is necessary to provide a service or fulfil a contract with you;
• we need to comply with a legal obligation;
• it is necessary for our legitimate business interests, such as managing and improving our services, where those interests do not override your rights; or
• you have given us your consent.

Where we rely on consent, you can withdraw that consent at any time.

Health and Consultation Information
Information about your health is considered particularly sensitive under data protection law, and we take additional care when handling it.

We collect relevant health and consultation information to help us assess whether a treatment is appropriate for you and to provide our treatments safely.

Where required, we will ask for your explicit consent to collect and use this information.

We only collect information that is relevant to your treatment and limit access to members of our team who reasonably need it for treatment or legitimate business purposes.

Appointment Communications
When you book an appointment, we may contact you by email or SMS with information directly relating to your booking, such as appointment confirmations, reminders, changes or important information about your visit.

These service communications are separate from marketing communications.

Marketing
If you have chosen to hear from us, we may contact you with news about The Light Salon, products, treatments, events, launches and offers.

You can change your marketing preferences or unsubscribe at any time by using the unsubscribe option in our communications or by contacting us.

Choosing not to receive marketing will not affect essential communications relating to your appointments, purchases or services.

Who We Share Your Information With
We do not sell your personal information or share it with other organisations for their own marketing purposes.

We use trusted service providers where necessary to operate our business and provide our services. These include Pabau, our appointment and client management system, and Stripe, which securely processes payments on our behalf.

We may also use service providers that support our website, communications and IT systems. These providers are only permitted to use personal information as necessary to provide their services and must handle it in accordance with applicable data protection law.

We may disclose personal information where we are required to do so by law.

Pabau
We use Pabau as our appointment and client management system.

This means information such as your contact details, appointments, treatment history and relevant consultation information may be stored and processed through Pabau so that we can manage your appointments and provide our services.

Pabau acts as a service provider to The Light Salon and processes client information on our behalf.

Pabau states that personal and client data belonging to its UK customers is stored in UK-based data centres. Pabau may also use approved service providers to support certain functions such as hosting, email and SMS communications, subject to appropriate data protection safeguards.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet our legal, regulatory, accounting and insurance requirements.

Treatment and consultation records are generally retained for at least six years from the date of treatment. 
Where the client is under 18, these records may be retained for a longer period in accordance with our insurance and legal requirements.

Other types of personal information may be retained for different periods depending on why we hold it.

When information is no longer required, we will delete or securely dispose of it in accordance with our retention practices.

Keeping Your Information Secure
We take appropriate organisational and technical measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

Access to personal information is limited to people who reasonably need it to perform their role.

Children and Young People
We provide appropriate treatments to clients under the age of 16 with the consent of a parent or legal guardian.

A parent or legal guardian must provide consent and be present for an under-16 client's first treatment at The Light Salon.

Where we collect personal information relating to a child or young person, we take particular care to use that information appropriately and protect their privacy.

Your Rights
Under UK data protection law, depending on the circumstances, you may have the right to:

• ask for access to the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to certain ways in which we use your information;
• withdraw your consent where we rely on consent; and
• request the transfer of certain information to you or another organisation.

These rights are not absolute and may depend on the circumstances and the reason we hold the information.

To exercise any of these rights, please contact us at customerservice@thelight-salon.com.

Your Right to Object
Where we process your personal information on the basis of our legitimate interests, you have the right to object to that processing in certain circumstances.

You can also object to the use of your personal information for direct marketing at any time.

Please contact customerservice@thelight-salon.com if you wish to exercise this right.

Complaints
If you have any concerns about how we have handled your personal information, please contact us first so that we have the opportunity to address them.

You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our business, services, systems or legal requirements.

The latest version will be available on our website, and the date at the top of this policy will show when it was last updated.

Contact Us
If you have any questions about this Privacy Policy or how we use your personal information, please contact:

The Light Salon Limited
customerservice@thelight-salon.com
thelight-salon.com