Policies & privacy

Everything, in one place.

Everything in one place: how paying and cancelling work, what happens to anything you tell me, and the single cookie this website sets. Each also has a page of its own.


Paying

Treatments are paid for in full when you book, by card, on the website. That is the whole of it — nothing to bring on the day, no cash to find, no transfer to remember.

The card details are typed on Stripe’s own page. This website never sees a card number, and nothing about your card is kept here.

A patch test costs nothing, so there is nothing to pay for one.


Moving, cancelling and refunds

Give me at least 48 hours and you can move the appointment for free. What you paid moves across to the new time with you.

Cancel outright with 48 hours' notice or more and you get all of it back. The refund goes to the card you paid with and takes a few working days to show up, which is the bank's doing rather than mine.

Inside 48 hours, or if you do not turn up at all, the payment is kept. It covers the products already set out and the hour nobody else could book at that notice.

Life happens — illness, childcare falling through, a car that will not start. Message me as soon as you know and I will always be as fair as I can be about it.


Running late

Up to 15 minutes late is usually absorbed without any fuss. Past 15 minutes, the treatment is either shortened so it finishes on time or rebooked, and the full price applies.

The appointment after yours belongs to someone else. Keeping to time is how everybody gets the treatment they paid for.


Patch tests

Every brow tint and LVL lash lift needs a patch test at least 24 hours before the appointment. It is a dot of product behind the ear or inside the elbow, and it takes two minutes.

No patch test means no treatment, with no exceptions — not for regulars, not for weddings, not for "I have had it a hundred times before". Reactions to tint are rare, and they are also the reason this rule is the only one I will not bend.

A new test is needed if it has been more than six months since your last one, or if since then you have been pregnant, unwell, started a new medication, or had a reaction to anything.


Health and honesty

The consultation form is there so I know what I am working with. Allergies, medication, recent peels or retinol, pregnancy, skin conditions — all of it changes what is safe and sensible to do.

If something you tell me means a treatment should wait, I will say so and we will rebook. I am a beauty therapist, not a medical professional: I do not diagnose, and I will not tell you to change anything a doctor has prescribed.


Children and pets

Babies in arms and pushchairs are fine, in the treatment room and on mobile visits. Older children are welcome if someone else is there to keep an eye on them — I cannot watch a child and hold a blade at the same time.

On mobile visits, please keep pets out of the room while I am working. I am not precious about it; it is just hygiene.


Loyalty and referrals

Loyalty stamp card: every facial gets a stamp, and the 6th is half price. The card lives in your purse, not in an app.

Referrals: send a friend and you both get £5 off — you on your next appointment, them on their first. Just make sure they mention your name when they book.


Privacy notice

This is the plain-English version, and it is the whole of it. Beautyybyjessicaa is run by Jessica as a sole trader in Middleton, Leeds, and she is the data controller for anything you send.

There are five things on this website you can fill in — a booking, the consultation form, an after-treatment feedback form, a review, and an account — and they are handled differently, so each is set out below.

  • Booking: when you book online, your name, phone number, email address and — for a mobile visit only — the address Jessica is coming to are stored in the website's own diary so the appointment exists and the slot is held. Anything you type into "anything I should know" is stored with it. It is kept for 12 months after the appointment and then deleted automatically.
  • Paying: the card details are typed on Stripe’s own page, not this one. No card number ever touches this website, and Stripe tells it only that a payment succeeded and for how much. Stripe is the payment processor and holds that transaction under its own privacy policy.
  • The consultation form: your name, phone number, email address, the treatments you are interested in, and the health information the form asks for (pregnancy, pacemakers or implanted devices, allergies, medication, recent skin treatments, skin conditions, previous reactions and whether you have had a patch test). It is emailed to Jessica and to nobody else.
  • Where those answers go depends on whether you have an account. Without one they are emailed and nothing more — not saved to this website, not written to your browser. With one, a copy is kept on your account so it is already filled in next time, and you can delete it whenever you like by closing the account.
  • The feedback form after a treatment: whatever you choose to write, emailed to Jessica. You do not have to give your name, and the form works perfectly well without it. Nothing is stored on the website.
  • An account, if you choose to make one: your email address, and whatever name, phone number and address you save into it. It exists to save you filling the same boxes in every time and to show you what you have booked. You never need one — booking as a guest works exactly the same and always will.
  • Signing in: a code is emailed to you, or a password if you have set one. A password is stored only as a PBKDF2 hash and cannot be read back, by Jessica or by anybody else. Signing in puts one cookie in your browser — see below.
  • A review: a review is published, so treat it as public. What is stored and shown is your first name and one initial, the treatment, the rating and the words you wrote — the name is shortened on the way in, so a full name cannot end up on the page even if you type one. The email address is optional, is passed to Jessica in the notification so she can reply, and is never stored or shown. Ask and any review comes down.
  • Why any of it: to arrange and carry out your appointment, to decide whether a treatment is safe and suitable for you, and to keep the diary straight. Nothing else. It is never used for marketing, never sold, and never shared beyond the services named here.
  • Who sees it: Jessica. Email is delivered by Resend and the diary and reviews are stored on Cloudflare, both over encrypted connections — they handle the data on her behalf and do nothing else with it.
  • How long: bookings for 12 months after the appointment, then deleted automatically. Emails for up to 12 months, so a repeat appointment is not started from scratch, then deleted. An account and the consultation answers on it stay until you delete them, which you can do yourself at any time from the account page — there is a button, it takes one press, and it is immediate. Reviews stay until you or Jessica take them down. Insurance requires treatment records to be kept longer; those live in Jessica's own records, offline.
  • Cookies: one, and only if you sign in. There is a page of its own about it — see the cookie policy.
  • Your rights: if you have an account you can see and change most of this yourself, and delete all of it in one press. Otherwise you can ask what is held about you, ask for it to be corrected, or ask for it to be deleted, and it will be done. Ask by message or email. If you are ever unhappy with how your data has been handled you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

This website uses one cookie, and only if you sign in to an account. Browse it, read it, book an appointment, buy a voucher or fill in any form as a guest and it sets nothing at all.

That is not a boast about being minimal for its own sake. It is why there is no banner on this website asking you to accept anything: there is nothing to ask about.

  • The one cookie: it is called bbj_session and it holds a long random string and nothing else — not your name, not your email, nothing that means anything to anybody who reads it. It is what tells the website you are the person who signed in.
  • It is set only when you sign in, and deleted at both ends the moment you sign out. Left alone it expires after 30 days.
  • It is marked HttpOnly, so no script on the page can read it; Secure, so it never travels unencrypted; and SameSite=Lax, so another website cannot make your browser use it.
  • Why there is no consent banner: the rules (the Privacy and Electronic Communications Regulations) require consent for cookies except those strictly necessary for a service you asked for. Keeping you signed in, after you asked to be signed in, is that exception. Nothing here is used for advertising, profiling or tracking you between websites — which would need your consent, and which this website does not do.
  • Visitor numbers: Cloudflare Web Analytics counts page views without a cookie and without an identifier of any kind. It records no personal data, nothing you type, and nothing that could be tied back to you. That is why it needs no consent either.
  • No third party loads anything on these pages. No embedded maps, no social media widgets, no fonts fetched from elsewhere, no advertising network — so nothing else is in a position to set a cookie on you here.
  • Turning it off: your browser can block or delete cookies for this website whenever you like. Everything except staying signed in will carry on working — you will just have to sign in again each time, or use the website as a guest, which needs no account at all.

Terms

These terms are between you and Jessica, trading as Beautyybyjessicaa, a sole trader based in Middleton, Leeds. They apply to every appointment booked and every voucher bought through this website. Booking is you agreeing to them.

Prices on this website are correct at the time of writing and may change; the price quoted when you book is the price you pay.

Treatments are carried out by a qualified therapist holding the qualifications listed on the About page, with full public liability and treatment insurance in place. Results vary from person to person and nothing here is a guarantee of a particular outcome.

Gift vouchers are valid for 12 months from purchase, are not exchangeable for cash, and can be used against any treatment. Courses are paid up front and used within 12 months.

The full address is given to clients once a booking is confirmed. Please do not share it publicly — it is a family home.

Something gone wrong? Say so — message 07575 301527 or email beautyybyjessicaa@gmail.com and it gets dealt with directly. Nothing here takes away the rights you have under the Consumer Rights Act 2015, which apply whatever this page says: a service has to be carried out with reasonable care and skill, and if it is not, you are entitled to have it put right.


Who I am

Beautyybyjessicaa is the trading name of Jessica, a sole trader working from Middleton, Leeds and travelling to clients across south Leeds. Qualified to VTCT Beauty Therapy Level 2 and VTCT Beauty Therapy Level 3, with public liability and treatment insurance in place.

Not VAT registered, so no VAT is charged on anything and no VAT number applies.

To reach a person about any of this — including anything about your own data — email beautyybyjessicaa@gmail.com, message 07575 301527, or use any of the ways on the contact page. A postal address is given on request; the treatment room is a family home, which is why it is not printed here.


Any questions, just ask.