Privacy Notice

Last updated: 21 August 2026

1. Who we are

Gels by Gracie and Studio GBG are operated by Grace W-Holland, a sole trader, from:

Gatcombe House
Copnor Road
Hilsea
Portsmouth
PO3 5EJ

Gels by Gracie provides nail and beauty treatments. Studio GBG is our dedicated nail education and training brand.

Grace W-Holland is the data controller responsible for the personal information processed through both businesses.

For privacy enquiries, please contact:

Gels by Gracie: hello@gelsbygracie.co.uk
Studio GBG: hello@studiogbg.info

2. Information we collect

Depending on how you contact or book with us, we may collect:

Your name, email address and telephone number

Information included in an enquiry or contact form

Appointment and course-booking information

Payment and transaction information

Details relating to your training, assessments and certification

Relevant allergy, sensitivity or health information required to provide treatments or training safely

Marketing preferences

Technical information about how visitors use our websites, including device, browser and website-usage information

We only collect information that is reasonably necessary to provide our services, respond to enquiries, process bookings and meet our legal responsibilities.

3. How we collect information

We may collect personal information:

When you complete a website contact form

When you contact us by email, telephone, social media or in person

When you book a treatment or course

When you make a payment

When you complete a consultation, assessment or course document

Through website cookies and analytics, where you have given the required consent

Through booking and payment providers used by the business

4. How and why we use your information

We may use your information to:

Respond to enquiries and provide information about treatments or courses

Arrange, manage and confirm appointments or course bookings

Take deposits and process payments

Deliver treatments, training, assessments, mentoring and student support

Issue course certificates and maintain appropriate training records

Contact you about your booking or service

Maintain financial, tax and business records

Meet health, safety, insurance and legal responsibilities

Handle questions, complaints or disputes

Protect the security and operation of our websites

Send marketing communications where you have agreed to receive them

Our lawful reasons for processing information may include:

Contract: where processing is necessary to provide a requested service or take steps before entering into a contract

Legal obligation: where records must be kept for accounting, tax, insurance or other legal purposes

Legitimate interests: where necessary to operate, protect and improve the business or respond to customers, provided those interests do not override your rights

Consent: where you have agreed to marketing, optional cookies or another specific use of your information

5. Health and allergy information

Relevant health, allergy or sensitivity information may be required to ensure that treatments or practical training can be provided safely.

Because health information receives additional legal protection, we will only request and use this information when it is genuinely necessary. Where required, it will be processed with your explicit consent and kept appropriately secure.

You may withdraw your consent, although this could mean that we are unable to provide a particular treatment or training activity safely.

6. Who we share information with

We do not sell personal information.

Where necessary, information may be shared with trusted service providers, including:

IONOS, which provides website hosting, contact forms and website services

Timely, which provides appointment-booking services for Gels by Gracie

Stripe and Klarna, where used to process deposits or payments

Email and communication providers

Accounting, insurance and professional advisers

Google services, such as Google Maps, where you have accepted the relevant cookies

Regulators, courts, law-enforcement bodies or other authorities where disclosure is legally required

These organisations may only use information for the services they provide or as otherwise permitted by law.

7. International data transfers

Some service providers may store or process information outside the United Kingdom.

Where this happens, we will rely on appropriate legal safeguards, such as UK adequacy regulations or approved contractual protections, to help protect personal information.

8. How long we keep information

We keep personal information only for as long as reasonably necessary.

Normally:

General enquiries may be kept for up to 12 months after the last contact

Appointment, course, contract and payment records may be kept for up to six years after the relevant transaction or business relationship

Training and certification records may be retained where reasonably necessary to verify a qualification or respond to future enquiries

Health, allergy and consultation information will be kept only for as long as necessary for safety, insurance and applicable legal requirements

Marketing information will be retained until you unsubscribe or withdraw consent

Information may be retained for longer where required by law, an insurer, a regulator or in connection with a legal claim.

9. Marketing

We will only send promotional emails or messages where we have an appropriate legal basis, including where you have given consent.

You can unsubscribe or withdraw your consent at any time by contacting us or using an unsubscribe option included in a marketing message.

Withdrawing consent will not affect the lawfulness of anything done before consent was withdrawn.

10. Cookies and website analytics

Our websites use cookies and similar technologies. Some are necessary for the websites to function, while others may support analytics, maps or translation services.

Optional cookies will only be used where the required consent has been given. Cookie choices can be reviewed or changed through the Privacy Settings available on each website.

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

Ask for a copy of the personal information we hold about you

Ask us to correct inaccurate or incomplete information

Ask us to delete your information

Ask us to restrict how your information is used

Object to certain uses of your information

Ask for information to be transferred where applicable

Withdraw consent where processing is based on consent

These rights are not absolute and may be subject to legal exceptions.

To exercise a right, contact us using one of the email addresses shown at the beginning of this notice. We may need to confirm your identity before responding.

12. Data-protection complaints

If you have a concern or complaint about how your personal information has been handled, please email us with the subject Data Protection Complaint.

Please explain what has happened, which business your complaint concerns and how you would like the matter resolved.

We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you appropriately informed and notify you of the outcome.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

We would appreciate the opportunity to address your concerns directly before you contact the ICO.

13. Changes to this notice

We may update this Privacy Notice when our services, suppliers or legal responsibilities change.

The latest version will always be published on the Gels by Gracie and Studio GBG websites, with the date of the most recent update shown at the top.