Privacy Policy

This website is operated by SF Flow State Limited, trading as Sabrina Falk and SHY. SF Flow State Limited is registered in England and Wales under company number 15529092. Registered office: Second Floor, Kirkland House, 11–15 Peterborough Road, Harrow, Middlesex, HA1 2AX. Trading address: SHY, 35 High Street, Lewes, East Sussex, BN7 2LU. VAT number: GB 478 9253 33. Contact: contact@studioshy.co.uk.

Who controls personal information

SF Flow State Limited is the data controller for personal information collected through this website and through Sabrina Falk enquiries, bookings, treatments, purchases, Bridal, Education and Mentoring.

Information collected

Information may include names, contact details, enquiries, correspondence, appointment and order information, payment records, course or mentoring interests, website and device information, and marketing preferences. Where relevant to treatment safety and with an appropriate lawful basis, consultation records may include health information, medication, allergies, treatment history, photographs and consent records.

How information is collected

Information may be provided directly through Shopify, Phorest, website or LeadConnector forms, email, telephone, consultations, purchases, Substack or other services chosen by the client. Technical information may also be collected through necessary cookies and any optional analytics or advertising tools that the visitor has permitted.

Why information is used

Information is used to answer enquiries, assess treatment suitability, arrange and provide services, manage appointments and orders, take payment, provide treatment and aftercare communications, administer Bridal, Education and Mentoring enquiries, meet accounting, insurance and legal responsibilities, keep the website secure and improve services.

Lawful bases

Depending on the activity, information is processed because it is needed to take steps requested before entering a contract, perform a contract, meet a legal obligation, support a legitimate business interest or because consent has been given. Health information is handled only where an additional condition for special-category information applies, including explicit consent where appropriate.

Services and organisations involved

Shopify hosts the website and online store. Phorest is used for bookings and client records. LeadConnector may process form enquiries. Payment, email, delivery, analytics, advertising, affiliate, Substack, accounting, professional and technology providers may process information when their services are used. Information may also be shared where required by law or needed to establish or defend legal rights.

International processing

Some service providers may process information outside the UK. Where this happens, SF Flow State Limited relies on the safeguards required by UK data-protection law and the provider’s applicable contractual protections.

How long information is kept

Information is kept only for as long as it is needed for the purpose collected and for any legal, tax, professional or insurance requirement. Order and accounting records are generally retained for at least six years. Enquiry information that does not lead to a service is reviewed and deleted when it is no longer useful. Marketing information is kept until consent is withdrawn or the person unsubscribes. Treatment and consent records are retained in line with professional and insurance requirements.

Individual rights

UK data-protection law provides rights in certain circumstances, including rights to request access, correction or erasure, restrict or object to processing, request data portability and withdraw consent where consent is the basis being used. A request can be sent to contact@studioshy.co.uk.

Marketing

Marketing emails are sent only where there is a lawful basis to do so. Every marketing email will include a way to unsubscribe. Unsubscribing from marketing does not prevent essential appointment, order or service messages.

Cookies

The website uses cookies needed for core functions such as security, navigation and checkout. Optional analytics, advertising or personalisation cookies should be controlled through the website’s consent settings where they are enabled.

Questions and complaints

Privacy questions can be sent to contact@studioshy.co.uk. Concerns may also be raised with the Information Commissioner’s Office at ico.org.uk.