Privacy Policy – LDLP Studio Ltd
Trading as Cocoon Beauty and Aesthetics at The Heights
Effective Date: 12 October 2026
LDLP Studio Ltd, trading as Cocoon Beauty and Aesthetics at The Heights, is committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable electronic communications and marketing laws.
1. Data Controller
Lisa de-la-Plain, on behalf of LDLP Studio Ltd, is responsible for determining how and why your personal data is processed.
- Company number: 06251583
- Registered office: 11a Conisboro Avenue, Caversham, Reading, Berkshire, RG4 7JB
- Trading name: Cocoon Beauty and Aesthetics at The Heights
- Contact: Lisa de-la-Plain
- Email: lisa@cocoon.co.uk
- Phone: 07810 542270
2. Your Rights Under the UK GDPR
You have rights regarding your personal data, including the right to:
- Request access to the personal data we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Request deletion of your personal data where applicable.
- Request restriction of processing in certain circumstances.
- Object to certain types of processing, including direct marketing.
- Request a copy of certain personal data in a portable format where applicable.
- Withdraw consent where processing is based on consent.
- Complain to the Information Commissioner’s Office (ICO).
These rights are subject to certain conditions and exemptions under the law.
To exercise your rights, please contact us using the details provided above.
3. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, taking into account our legal, regulatory, insurance and professional obligations.
As a general policy, if you have not used our services for seven (7) years, your identifiable client data will be securely deleted or anonymised unless there is a lawful reason to retain it for longer.
Certain records may need to be retained for different periods where required by law, insurance conditions or other legitimate obligations. We review the information we hold and securely dispose of it when it is no longer required.
4. What Data We Collect and Why
a. Beauty Treatments
Data collected: Name, contact details, appointment history, treatment records and preferences.
Purpose: To manage appointments, provide treatments safely, maintain appropriate treatment records and personalise our services.
Legal basis: Processing may be necessary to perform a contract with you, comply with legal obligations or pursue our legitimate interests, where these are not overridden by your rights and freedoms.
b. Health Information and Special Category Data
Data collected: Relevant health information, including allergies, pregnancy, medication, skin conditions and other information that may affect treatment suitability or safety.
Purpose: To assess treatment suitability, identify contraindications, manage risks and provide treatments safely.
Legal basis: We identify an appropriate lawful basis under Article 6 of the UK GDPR and a separate condition under Article 9 for processing special category data. Where we rely on explicit consent, we will obtain it appropriately and explain how it may be withdrawn.
We only collect health information that is relevant to the treatments or services being provided and take appropriate steps to protect it.
5. Appointment Confirmations and Reminders
We may contact you by SMS, email or telephone to confirm, arrange or remind you of appointments and to communicate important information relating to your treatments.
Legal basis: Depending on the circumstances, this may be necessary for the performance of our contract with you or based on our legitimate interests in managing appointments and providing our services.
Appointment-related communications are separate from marketing communications.
6. Feedback and Reviews
We may invite you to provide feedback about your experience or leave a review following an appointment.
Legal basis: Legitimate interests, where appropriate.
You can ask us not to send feedback requests at any time. We will not publish identifiable feedback or testimonials in a way that identifies you without an appropriate lawful basis and any necessary permission.
7. Loyalty Programmes
If you participate in a loyalty programme, we may process information about your participation, points balance, rewards and eligible offers.
Purpose: To administer the programme and provide its benefits.
Legal basis: Contractual necessity or legitimate interests, as appropriate. Where consent is required for associated marketing, we will obtain it.
You can withdraw marketing consent at any time. Leaving a loyalty programme may affect your ability to receive its benefits.
8. Marketing Communications
We may send information about treatments, products, offers, promotions and events where we are legally permitted to do so.
Legal basis: Consent or, where all applicable legal requirements are met, the existing-customer exception under electronic marketing rules.
Where consent is required, we will obtain it before sending marketing communications. Where we rely on an applicable existing-customer exception, we will provide a clear opportunity to opt out when collecting your details and in each subsequent marketing message.
You can opt out of marketing at any time by using the unsubscribe option provided or contacting us directly. We will respect your preferences and maintain appropriate records of objections and opt-outs.
Withdrawing marketing consent will not affect the lawfulness of processing carried out before withdrawal or prevent us from sending essential service-related communications.
9. Data Processors, Third Parties and Storage
We may use trusted third-party service providers to support our business, including providers of appointment booking systems, client record management, payment processing, email, communications and data storage, where applicable.
These providers may process personal data on our behalf under appropriate contractual arrangements and safeguards.
Visiting practitioners: Where necessary and lawful, we may share relevant booking information with visiting practitioners who provide services at the premises, for example to coordinate appointments or manage bookings. We will limit any information shared to what is reasonably necessary for the purpose. Visiting practitioners may maintain their own treatment and consultation records and are responsible for handling personal data in accordance with their own data protection obligations.
Where personal data is transferred outside the United Kingdom, we will ensure that the transfer complies with applicable data protection law and that appropriate safeguards are in place where required.
Further information about Shortcuts’ data storage practices is available at:
https://www.shortcuts.com.au/datastoragestatement
If you require further information about how your data is handled by our service providers, please contact us.
10. Data Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
These measures are intended to be proportionate to the nature of the information we hold and the risks associated with processing it. Access to personal data is restricted to those who need it for legitimate business purposes.
Where a personal data breach occurs, we will assess it and take any action required under applicable data protection law, including notifying the ICO or affected individuals where legally necessary.
11. Contact and Complaints
If you wish to exercise your data protection rights, ask a question about this policy, withdraw consent or raise a concern about how your personal data is handled, please contact:
Email: lisa@cocoon.co.uk
Phone: 07810 542270
Postal address:
Cocoon Beauty and Aesthetics at The Heights
11a Conisboro Avenue
Caversham
Reading
Berkshire
RG4 7JB
We will consider your request and respond in accordance with applicable data protection law.
If you are unhappy with how we have handled your personal data, you can also complain to the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Telephone: 0303 123 1113
You have the right to complain to the ICO at any time.
