x
Privacy policy
Last updated: 21/10/2025​
​
1. Data Controller
The data controller is Elda Thanasi, based at London, UK, e-mail: eldathanasi@hotmail.com, phone: +44 (0)7380527830.
The controller is responsible for the proper handling of personal data collected through this website and in relation to the services provided (LPG body treatments, facial cleansing, and beauty consultations).
2. Types of Data Collected
This website may collect the following categories of personal data:
Identification and contact details (name, surname, phone number, e-mail) provided by users through contact or booking forms;
Health-related data (only if voluntarily provided by the user for the purpose of assessing beauty treatments);
Technical and browsing data (IP address, device type, cookies, anonymised usage data).
3. Purpose of Processing
Personal data is collected and processed for the following purposes:
Handling enquiries sent through the website (information requests, quotations, bookings);
Providing beauty services (LPG treatments, facial cleansing, personalised consultations);
Fulfilling legal and tax obligations related to the professional activity;
Sending promotional communications and newsletters, only with the user’s explicit consent;
Improving user experience and performing anonymised statistical analysis on site traffic.
4. Legal Basis for Processing
Data processing is based on:
Performance of a contract or pre-contractual measures (e.g., booking requests or service enquiries);
Explicit consent of the data subject, for sending newsletters or processing special category data (e.g., health information);
Legal obligations, for record-keeping and tax compliance;
Legitimate interests of the controller, such as ensuring website security and preventing misuse.
5. Processing Methods
Personal data is processed using electronic and/or manual means, with appropriate technical and organisational measures in place to ensure confidentiality, integrity, and security of the data.
​
6. Data Retention
Personal data is retained for as long as necessary to fulfil the purposes described above, and in any case:
for contractual purposes, up to 10 years;
for marketing purposes, until withdrawal of consent;
for legal obligations, according to applicable UK regulations.
7. Data Disclosure and Transfers
Data may be shared with third-party service providers who assist the controller in providing services (e.g., web hosting, booking software, accountants), all of whom are bound by confidentiality agreements and comply with the UK GDPR.
Data is not transferred outside the United Kingdom or the European Economic Area. In case of future transfers, appropriate safeguards will be implemented.
​
8. Rights of Data Subjects
Under the UK GDPR, users have the following rights:
Access to their personal data;
Rectification or deletion (“right to be forgotten”);
Restriction or objection to processing;
Data portability;
Withdrawal of consent (without affecting the lawfulness of processing before withdrawal).
To exercise these rights, users can contact: [email@example.com].
If users believe their data has been processed unlawfully, they can lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk.
​
9. Cookies and Tracking Tools
This website may use technical cookies and, subject to consent, analytical or marketing cookies (e.g., Google Analytics).
For more information, please refer to the Cookie Policy.
​
10. Changes to this Policy
This policy may be updated from time to time. Users are encouraged to review it periodically to stay informed about any changes.
​
Contact
For any questions about these Terms, please contact: