Last updated: 12 December 2025
MMM Beauty (“we”, “us”, “our”) is a UK sole trader. This policy explains how we collect, use, and protect personal data, and how we use cookies and similar technologies, including optional analytics.
1) Who we are (Data Controller)
Data Controller: MMM Beauty (sole trader)
Email: data@mmm-beauty.co.uk
2) What we collect
Information you give us
- Name, contact details, appointment details, and messages when you book or contact us.
Information collected when you use our website
- Essential technical data needed to keep the site working and secure.
- Optional analytics data (only if you allow analytics): information about how you use the site, device/browser information, and interaction events.
3) Why we use your data (and lawful bases)
We use personal data for these purposes:
- To provide services and manage bookings/enquiries (eg, booking administration, responding to messages).Lawful basis: Contract / steps prior to contract.
- To run the business and meet legal obligations (eg, accounting/tax records).Lawful basis: Legal obligation and/or legitimate interests.
- To keep the website secure and functioning (eg, preventing abuse, troubleshooting).Lawful basis: Legitimate interests.
- To measure and improve the website using optional analytics.Lawful basis: Consent (you can refuse and the site will still work; you can withdraw anytime).
4) Cookies and optional analytics (GA4 + Microsoft Clarity via GTM)
Cookies are small files stored on your device. We use:
Essential cookies (always on)
These are necessary for basic site functionality and security.
Optional analytics (only if you allow analytics)
If you choose Allow analytics, we use:
- Google Analytics 4 (GA4) to understand overall website usage and improve performance.
- Microsoft Clarity (true session replay) to understand how visitors interact with the site (eg, mouse movements, clicks, scrolling, and page navigation) through session recordings and related analytics.
We deploy these analytics tools using Google Tag Manager (GTM) (a tool that loads tags based on your preference). Your consent choice controls whether GA4 and Clarity run.
Sensitive data masking (Clarity)
Clarity is designed to mask sensitive content by default, and it classifies input box content (including numbers and email addresses) as sensitive content that is masked and not uploaded when masked. We also avoid intentionally collecting sensitive information through session replay.
5) Manage cookies
You can review or change your analytics preference at any time. Essential cookies will remain on so the site keeps working.
Open cookie settings (button/link)
Withdrawing consent should be as easy as giving it.
6) Who we share data with
We share personal data only where needed to operate the website and business, including:
- Google (GA4) — only if you consent to optional analytics.
- Microsoft (Clarity) — only if you consent to optional analytics/session replay.
We do not sell personal information.
7) International transfers
Some providers (including Google and Microsoft) may process data outside the UK. Where restricted international transfers apply, appropriate safeguards are used (for example, approved contractual mechanisms).
8) How long we keep your data
We keep personal data only as long as necessary:
- Bookings/enquiries: as needed to provide services and handle follow-ups.
- Business and tax records: retained as required for accounting/tax compliance.
- Analytics: retained according to our GA4 and Clarity settings. For example, Clarity indicates recordings are retained for a period (with some retained longer depending on settings/features).
9) Your rights
You may have rights including: access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent (for consent-based processing like optional analytics). You can complain to the UK regulator, the Information Commissioner’s Office (ICO).
10) Updates to this policy
We may update this policy from time to time. We’ll publish updates on this page and change the “Last updated” date.