Privacy Policy

Last updated: 2 October 2026

I take your privacy seriously. This page explains, in plain English, what information I hold about you, why I hold it, and what your rights are. If anything here is unclear, please just ask me.

1. Who I am

The Nail Editor is a sole trader business run by Dominique Sharpe from a home studio in Godmanchester, Cambridgeshire. I am the data controller for the information described here. You can reach me at [email protected].

2. What I collect

Contact details, such as your name, email address, phone number, address and date of birth.
How you'd like to be contacted, and your choices about photographs, which you can change at any time.
Appointment details, including the treatments you book, the dates and times, your answers to the booking questions (such as whether it is your first visit), and any notes you send me when booking. If you book for someone else, their name too.
Payments and charges: deposits, and any late cancellation or missed appointment charge under my terms of business, and whether it has been paid.
Your consultation form and treatment records: your answers to my consultation form, your signature, the treatments you have had, the products used, any patch tests and their results, and my notes from each visit.
Health information you tell me about, such as allergies, skin sensitivities, medical conditions or medications, where these could affect your treatment.
Messages you send me through the contact form: your name, email address, what your message is about, what you write, and any inspiration photos you choose to attach.
Training enquiries. If you unlock my free workshop or register interest in a course, your name, email address, which description fits you best, and the training you would like to hear about.
Gift vouchers. If you buy one, your name and email address, the amount, who the voucher is for, who it is from and any message you add. For the voucher itself, its code and balance, and when it is used.
Photographs of your nails, kept with your treatment record so I can see what we did last time. They are only ever shared publicly with your permission. See section 6.
Children under 16. If you book for your child, their record is kept with your contact details, and you complete their consultation form on their behalf.
My newsletter. If you sign up, your email address (and your first name, if you give it). See section 7.
Basic website information, such as which pages are visited. This is anonymous and is not linked to you as an individual.

If you pay online (a gift voucher, a deposit or a charge), your payment is taken by Stripe. I receive your name, email address and the amount, plus the name and message for a voucher, but I never see or store your card details.

3. Why I hold it, and my lawful basis

To provide your treatment and manage your appointments. Lawful basis: performance of a contract with you.
To keep treatment records so I can look after you safely and consistently, and to meet the conditions of my professional insurance. Lawful basis: legitimate interests and legal obligation.
To keep health information so that treatments are safe for you. Because this is sensitive information, my lawful basis is your explicit consent, which you give when you complete your consultation form. You can withdraw it at any time, though I may then be unable to carry out certain treatments safely.
To take your booking requests, send your consultation form, confirm your appointments and remind you about them, by email and, only if you have asked for it, by text, and to let you change or cancel online and see your appointments. Lawful basis: performance of a contract with you.
To ask for and keep track of deposits and any late cancellation or missed appointment charge, as set out in my terms of business, including reminders if a charge is unpaid. Lawful basis: performance of a contract with you.
To send my newsletter, only if you have signed up and confirmed. Lawful basis: your consent, which you can withdraw at any time with the unsubscribe link in every newsletter.
To look after you after a visit: aftercare tips, a quick check that your nails are perfect, and a note when it may be time for your next appointment. Lawful basis: legitimate interests. See section 7.
To reply to your messages, and to send you a short confirmation that your message has arrived. Lawful basis: legitimate interests.
To respond to training enquiries. Lawful basis: legitimate interests. And, only if you tick the box asking for it, to email you when new courses open. Lawful basis: your consent, which you can withdraw at any time.
To sell and honour gift vouchers: to email the voucher to the person who bought it, and to check and update its balance when it is used. Lawful basis: performance of a contract.
To meet tax and accounting obligations. Lawful basis: legal obligation.

4. Health information

Information about your health is treated as a special category of personal data and is handled with particular care. I collect only what I need to keep your treatment safe, I record it in my secure online client records, where it is encrypted, and I do not share it with anyone else unless you ask me to or I am required to by law, for example in a medical emergency.

5. Who I share it with

I do not sell your information, and I do not share it for marketing. A small number of trusted services process information on my behalf so the business can run:

Resend sends emails from this website and my client records: messages from the contact and training forms (including any photos you attach), your consultation form link, appointment confirmations and reminders, gift vouchers, and my newsletter. If you sign up for the newsletter, Resend keeps your email address on my mailing list and records if you unsubscribe.
Twilio sends appointment reminders by text, only if you have asked for them.
Stripe takes payment for gift vouchers, deposits and any charges, and sends you a receipt. Stripe handles your card details and its own fraud checks under Stripe's privacy policy; I never see your card details.
YouTube hosts my free workshop videos. See section 10.
Cloudflare hosts this website, my booking system and my client records, which are stored in the European Union, and provides anonymous visitor statistics and the spam check on my forms and booking page. See section 10.
My accountant and HMRC, where required for tax purposes.

I may also disclose information where I am legally required to do so.

6. Photographs

I love sharing my work, and photographs of nails I have created appear in the gallery on this website and on my Instagram and Facebook pages. I will always ask before photographing you, and you are very welcome to say no: it makes absolutely no difference to your treatment. Your consultation form asks separately about photos on this website, on social media, in marketing, and, for lash and brow treatments, photos that show your face. I only use a photo in the ways you have said yes to. Photos are never captioned with your name unless you have asked me to tag you. Photographs I keep with your treatment record are private unless you have agreed to them being shared. If you change your mind later, tell me or update your choices yourself (see section 11): a photo from your record comes off this website automatically, and I will remove it from anywhere else I have shared it.

7. Marketing

I never send promotional texts, and I only send my newsletter to people who have signed up for it and confirmed by clicking a link in their email. It is occasional (a few times a year): new journal posts, seasonal designs and news. Every newsletter has an unsubscribe link, which takes effect straight away. Booking with me does not sign you up.

As a client, you may occasionally hear from me about your own appointments: a note when it may be time to book again, a hello if I have not seen you for a while, or, after a visit or two, a request for a review. Just tell me if you would rather not, or untick email on your contact choices, and I will stop.

Most of my promotion is simply posting on my public Instagram and Facebook pages, which you are free to follow or unfollow as you wish.

The one exception is training. If you tick the box on my training page asking to hear when new courses open, I will email you about courses, and nothing else. Leaving it unticked makes no difference to unlocking the free workshop. You can ask me to stop at any time, and I will remove you straight away.

8. How long I keep it

I keep your consultation forms, treatment records and photographs for 7 years after your last visit, as my insurance and health and safety rules require. Paper record cards from before my records moved online are kept for the same period. Booking and contact records, including any photos you send with a message, are kept only as long as they are useful, and financial records, including gift voucher sales, for the period HMRC requires. After that, paper records are destroyed securely and digital records deleted.

9. Keeping your information safe

Your client record is kept in my secure online records. Health information, signatures and my notes are encrypted, and only I can see your record; my systems are looked after by someone I trust, under strict confidentiality. Every time a record is opened, it is logged, and an encrypted backup is made each month. Paper record cards from before my records moved online are stored securely in my studio and are not taken elsewhere. Other information sits with the established providers named above, each of which uses encryption and its own security measures.

10. Cookies and website analytics

This website does not use advertising or tracking cookies. The visitor statistics I use are anonymous and do not identify you or follow you across other websites, which is why you are not asked to accept cookies when you arrive.

If you stop part-way through my consultation form, your answers so far are saved in your own browser so you can carry on later. They are deleted from your browser as soon as you send the form, and after seven days in any case. Your signature is never saved this way.

Buying a gift voucher opens a secure payment form from Stripe over the page (or on Stripe's own page, if the pop-up can't open). Nothing from Stripe loads until you choose a voucher. Stripe then uses cookies it needs to take payment safely and prevent fraud, under Stripe's cookie policy.

On this website, there are three places a third party can be involved. The first is the free workshop on my training page. The videos use YouTube's privacy-enhanced mode, so nothing is loaded from YouTube until you choose to press play, at which point YouTube may set its own cookies under Google's privacy policy. The page also remembers, in your own browser, that you have unlocked the workshop so you do not have to fill in the form again. That is stored only on your device and is never sent to me.

The second is booking. My booking calendar is my own and loads from my own website: it sets no cookies.

The third is the spam check on my contact and training forms and on my booking page. It is Cloudflare Turnstile, which loads only when you use one of them, and checks that a real person is sending the form rather than a spam robot, usually without you having to do anything. To make that check it looks at technical information about your browser and device, and it may set a cookie that is strictly necessary for the check to work. It is not used for advertising or to follow you around the web. See Cloudflare's Turnstile privacy notice.

11. Your rights

Under UK data protection law you have the right to:

ask for a copy of the information I hold about you;
have anything inaccurate corrected;
ask me to delete your information, where I am not required to keep it;
ask me to restrict how I use it, or object to my using it;
receive your information in a portable format;
withdraw your consent at any time, where I rely on consent.

You can see your appointments, and update your contact details and photo choices, yourself at any time at my.thenaileditor.com/me. For anything else, just contact me and I will help. There is no charge, and I will respond within one month.

12. Complaints

If you are unhappy with how I have handled your information, please tell me first and I will do my best to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

13. Changes to this policy

If I change how I handle your information, I will update this page and change the date at the top.

14. Contact me

The Nail Editor, Godmanchester, Cambridgeshire
[email protected]