Privacy Policy | Agatha Brazilian Bea

1. Who we are and how to contact us
Giselle Aghata Araujo Souza, trading as Agatha Brazilian Waxing, is responsible for the personal information described in this notice.
Email: agathagisa@hotmail.com
Telephone: 07915 225910
Address: Daysbrook Road, Belenoyd Lodge, London SW2 3TB, United Kingdom.
This notice covers enquiries, bookings and customer communications through our website, connected booking services and the Agatha messaging assistant.

2. Information we use
We use information you provide, including your name, telephone number, email address, requested treatments, appointment dates and times, messages, feedback and communication preferences. Booking information can also come from Wix or Treatwell, including booking, rescheduling and cancellation notifications.
If you send a voice message, its audio and transcription may be processed to understand your request. The website and its service providers may also receive technical information such as IP address, device and browser details and cookie identifiers.
Please do not send payment-card details, identity documents or unnecessary health information to the assistant. Contact the clinic directly about treatment suitability or sensitive matters.

3. Why we use information
We use booking and contact details to respond to your requests, arrange and manage appointments, handle changes or cancellations and send appointment-related communications. The lawful basis is taking steps at your request before a contract or performing our contract with you.
We also use relevant information for clinic administration, service feedback, troubleshooting and handling complaints, based on legitimate interests in operating and improving the service, taking account of your rights. Records required by law are kept on the basis of the applicable legal obligation.
Promotional messages and invitations to return are separate from necessary appointment communications. Where consent is required, we rely on your permission. Making a booking or reading this notice does not itself give permission for every future marketing message. You can ask us to stop promotional messages at any time by contacting us or replying to a message.
We need sufficient contact and appointment information to manage a booking. Without it, we may be unable to complete your request.

4. Automated assistance and human help
The Agatha assistant uses automated processing and language or transcription services to interpret messages, check availability and help with booking conversations and notifications. Please check the details before confirming a booking, change or cancellation.
For human assistance, corrections or questions, call 07915 225910 or email agathagisa@hotmail.com. You do not have to resolve your request through the assistant.

5. Who receives information
Depending on the service you use, relevant information is processed through Wix, Treatwell, Google Calendar, WhatsApp/Meta, n8n automation and its hosting service, Supabase, and OpenAI language or transcription services. Telegram is used for authorised testing and internal communications. Not every service receives every item of information.
Clinic personnel receive the appointment information needed for their work. The clinic owner receives management and feedback reports. Authorised technical support providers may access relevant information to maintain or troubleshoot the service. Information may also be disclosed where required by law or necessary for handling a legal claim.
External platforms have their own privacy notices for processing for which they are independently responsible.

6. Storage, international processing and retention
Connected cloud services and technical support may process or access information outside the United Kingdom. Locations and transfer arrangements depend on the provider and service used. Contact agathagisa@hotmail.com for details of the arrangements relevant to your information and any applicable transfer safeguards. This notice does not mean that all information is stored in the UK.
We retain personal information for as long as necessary to manage appointments, provide service, resolve requests and meet applicable legal obligations. Retention decisions take account of ongoing bookings, the need for relevant service history, unresolved complaints and legal requirements.
Audio, transcripts and messages are assessed separately from essential appointment and business records. Troubleshooting records are retained according to the need to investigate problems and maintain security. Information that is no longer needed will be deleted or anonymised; some records may need to be retained longer for legal obligations or unresolved claims.
Deletion is considered across the systems holding the information, including relevant copies and backups. This is not a promise that every copy is erased immediately or by an automatic schedule. We can explain any applicable limitations when handling your request.

7. Your rights and deletion requests
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your information. You can object to direct marketing and, where applicable, processing based on legitimate interests. Where processing is based on consent, you can withdraw it without affecting the lawfulness of earlier processing.
To request deletion, email agathagisa@hotmail.com with the subject "Data deletion request" and enough information to identify your booking or conversation. You may also contact us by telephone. We may need proportionate information to verify your identity. Please do not send identity documents unless specifically requested through an appropriate process.
We will respond without undue delay, normally within one month, subject to the applicable legal rules and permitted extensions. If some information must be retained, we will explain why.
If you have a privacy concern, please contact us. You also have the right to complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/

8. Cookies and external services
Our Wix website and embedded services use cookies and similar technologies. You can manage cookies through your browser and any consent controls presented on the website. Blocking some cookies may affect website features.
When you follow an external booking, messaging or Google review link, that provider's terms and privacy notice also apply. Information you choose to publish in a public review may be visible to other people.

9. Updates
We may update this notice when our services or information-handling practices change. The date above identifies the latest version.