Privacy Policy

1. Our commitment to your privacy

Hessle Nails & Spa is committed to protecting your personal data and respecting your privacy in accordance with UK data protection law.

2. Information we collect

When you book an appointment through this website, we collect your name, phone number, and appointment details (service, staff member, date and time). You can optionally add a note or attach a reference photo to help us understand your request. We do not currently collect your email address as part of booking.

If you use our AI chat assistant, your messages (and any photo you choose to attach) are sent to our AI provider to generate a reply. These aren't linked to your name or any booking, and aren't saved once your chat session ends.

3. How we use your information

• To schedule, manage, and if needed cancel or reschedule your appointment
• To recognise repeat customers so we can offer familiar, personalised service
• To contact you about your booking if there's an issue

We do not use your details for marketing, and we do not sell or share your information with third parties.

4. Third-party services

Booking details are stored securely with Supabase, our database provider. Our AI FAQ assistant is powered by Anthropic (Claude); messages you send it are processed to generate a reply but aren't linked to your name or booking details. We display our Google reviews using the Google Places API — this only pulls in our own public review data and never sends your information to Google. The map on our Contact page is an embedded Google Maps view.

5. Data storage & retention

Your booking details (name, phone number, notes, and any photo) are automatically deleted the day after your appointment. We keep a simple visit count linked to your phone number, with no name or contact details attached, so we can recognise repeat customers.

6. Cookies

This website does not use analytics or advertising cookies. Our staff sign-in is secured using Clerk, which may set a small number of essential cookies across the site to support that sign-in - these aren't used to track customers and don't apply unless someone is signed in as staff.

7. Your rights

Under UK data protection law, you have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, please contact us directly.

8. Changes to this policy

This Privacy Policy may be updated occasionally. Any changes will be posted on this page.