Privacy Policy
Last updated: September 2025
This website is provided by Needle and Nurse (“we”, “our”, “us”). We take your privacy seriously and are committed to complying with UK data protection law (UK GDPR and the Data Protection Act 2018).
Bookings and Personal Data
We do not collect, process or store personal data directly through this website.
All bookings for our services are managed via the Fresha booking system embedded and accessed on our public Facebook business page,
or through Instagram or direct communication with us.
When you book an appointment:
- You log in to your own Facebook (Meta) account and complete the booking through Fresha.
- Your personal details that you provided for your Facebook (Meta) account (such as your name, email, number and appointment information) are collected and processed by Fresha.
- Fresha then provides us with the information necessary to manage your appointment.
- We use this information solely to confirm, manage and provide your booked treatment.
- If you contact us via Instagram Direct Message, text message (SMS), or phone call to arrange an appointment, we may collect limited personal details such as your name, contact number and treatment request in order to confirm and manage your booking.
- This information is used only for the purpose of managing your appointment and any necessary aftercare. We do not add it to marketing lists without your consent.
Health or Special Category Data
If you provide us with information about your health, medical history, allergies or similar details (for example in a message, text or call when booking or discussing a treatment), we will only record and use this information if it is strictly necessary to provide your requested treatment or to ensure your safety. We do not keep such information for any other purpose, and it is never used for marketing. We will retain it only for as long as is required to manage your appointment and any aftercare.
Who Processes Your Data
Because bookings are handled through Fresha, Facebook (Meta), Instagram (Meta), or direct communication:
- Fresha acts as a data controller for the booking system. Their privacy policy is available at: https://www.fresha.com/privacy
- Facebook (Meta) also processes your data when you access our booking page via their platform. Their privacy policy is here: https://www.facebook.com/privacy/policy
- Instagram (Meta) processes your data when you message us via Direct Message. Their privacy policy is here: https://privacycenter.instagram.com/policy
- If you contact us via text message or phone call, your communications provider (e.g. your mobile network operator) also processes your data. Please refer to their privacy policy for further details.
How Long We Keep Your Data
We keep only the information provided to us by Fresha, Meta platforms (Facebook or Instagram), or directly by you (via text or phone) that is needed to manage your appointment and any aftercare. We do not retain your details for marketing purposes unless you have given consent directly through Fresha or by other clear consent.
Your Rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Ask us to correct or delete it
- Object to or restrict how it is used
If you booked via text message or phone call, you can exercise your rights directly with us regarding any information we hold from that booking.
Contact
If you have any questions about this Privacy Policy or about how your information is used for bookings, you can contact us at:
Needle And Nurse
Email: contact@needleandnurse.uk
Address: Sandbach, Cheshire, England, UK
Please note: Because most booking data is collected and processed by Fresha, Facebook (Meta), or Instagram (Meta), any requests to exercise your data protection rights (such as access, correction or deletion) should be directed to them. If you contacted us directly via text or phone, you may direct your request to us.