Your information and your choices.

Who is responsible

SK BEAUTY LTD, trading as VIVO Body Studio Leeds, is a company registered in England and Wales with company number 15830208. Registered office: 128 City Road, London, EC1V 2NX, United Kingdom.

SK BEAUTY LTD is the data controller for the website and the enquiries described here. Our in-house VIVO Body Studio Leeds team handles enquiries and CRM records. The treatment clinic and correspondence address is Brooklands Court 1, Brooklands Court Business Centre, Tunstall Road, Leeds, LS11 5HL, United Kingdom; the London registered office is not the clinic.

For privacy requests, customer support or complaints, email contact@vivobodystudio.com, write to the clinic or contact +44 7886 084321. Do not include medical records or identity documents in an initial message. Ask for a secure route if sensitive information or identity verification is needed.

Information we collect

When you submit a booking, WhatsApp or popup enquiry, we collect your name, email address, mobile number, any selected treatment area, intended action, originating page, website/clinic/treatment source, permitted campaign codes, submission time and contact preferences. We obtain this information from you and the page on which you submit. We match existing CRM records where possible and add the enquiry without replacing existing ownership, history or opt-outs.

Hosting also involves IP address, browser/device information, requested URL and request time for delivery and security. The application does not put contact details into its rate-limit counters. It has no medical-history, patient-photo, health free-text or payment-card field. Please discuss clinical information directly with the practitioner through an appropriate secure channel.

Submitting an enquiry is optional. Name, email and mobile are required to use the form so we can identify and respond to your request; you are not legally required to submit it. You can use the direct Fresha or WhatsApp links instead. A saved enquiry is not a confirmed appointment.

Why we use your information

We use contact and enquiry information to answer your request and help arrange an appointment. Where you ask us to take steps towards booking a service, our basis is taking those steps at your request before a contract, or performing the resulting contract. For general enquiries, routing, source/campaign attribution, accurate records and service security, we rely on our legitimate interests in responding to customers and operating a reliable service. We limit information to what those purposes need.

Future promotional email, SMS and WhatsApp messages rely on your separate consent for the channels you select. The choices are optional and unticked. You do not need marketing consent to enquire or book. We keep preference and suppression records to respect your choices; a website submission does not silently remove an existing opt-out.

We may retain or disclose information where needed to comply with applicable legal obligations, deal with a rights request or establish, exercise or defend a legal claim. This notice concerns website enquiries and communications; clinical assessment and treatment records are handled separately by the clinic.

Our team and service providers

Our authorised in-house team uses HighLevel, through the VIVO CRM portal, to manage contacts, enquiry notes, attribution and staff follow-up. Vercel hosts and protects the website. MessageMind supports enquiry communications and AI-assisted replies; the connected messaging services include Meta WhatsApp Business and Twilio for SMS/voice. These providers process the information needed for the services they supply, with their own infrastructure providers listed in the linked supplier documents.

Messages may be handled by an automated assistant before a member of the team takes over. You can ask to speak to a person. The website does not make an automated decision about clinical suitability or eligibility for treatment; the practitioner makes that assessment. No MessageMind browser widget, advertising pixel or optional analytics tag is active on this website.

Fresha handles booking and payment information you provide on its platform. WhatsApp handles messages you choose to send, and Google Maps handles your use of its directions service. Their notices apply to their own processing. Our site links to these services; it does not embed their booking, messaging or map widgets or import your appointments into the website.

Where information is processed

Information is not stored only in the UK. The configured Vercel application region is in the United States, and HighLevel uses US infrastructure. Their published processing agreements include Standard Contractual Clauses and UK transfer provisions for relevant restricted transfers. The links below explain those contractual protections.

MessageMind's published agreement identifies HN Ventures L.L.C-FZ in Dubai, United Arab Emirates. Its supplier documents describe EU processing, including primary servers in Germany and backups in the Netherlands, with EU adequacy or Standard Contractual Clauses for onward transfers where required. Storage location and the supplier's legal location are different facts; we do not describe this as UK-only processing or claim a UK transfer agreement that has not been verified.

You can use the supplier links below or email contact@vivobodystudio.com to request information about the safeguards applicable to your information and copies where available, with confidential material redacted where necessary.

How long information is kept

We determine how long to keep enquiry and CRM information by whether your request or appointment is still active, the need for relevant follow-up, any unresolved complaint or claim, applicable legal requirements and your privacy choices. Information that is no longer needed for those purposes should be deleted or anonymised. A minimal suppression record may be needed to continue respecting an opt-out. There is no single fixed period in this notice for all customer, treatment and supplier records.

Temporary application memory uses keyed hashes and CRM receipt identifiers to reduce abuse and repeated submissions. Its retry windows last up to 24 hours; expired entries are removed during subsequent processing or a server restart. This is not the retention period for the actual enquiry saved in HighLevel. The production Vercel Observability Plus runtime-log window is 30 days; other provider security and account records are subject to their own purposes and policies.

MessageMind publishes a default conversation period of 24 months, configurable by the customer, and separate security-log and backup periods. Those published defaults are not a promise that every VIVO record is automatically deleted on that date. Contact us for information about a particular record or to request deletion; we will consider the purpose, any necessary retention and the systems in which it is held.

Your privacy preference remains in this browser until changed or cleared; enquiry invitation and submission flags last for the browser session. They do not contain your contact details. The cookie policy lists the actual storage used.

Protecting enquiries

The website uses encrypted connections, server-side validation and limited submission throttling. Supplier credentials remain on the server. Temporary retry controls and CRM matching reduce repeated enquiries, but do not guarantee that simultaneous submissions can never create a duplicate. If a save cannot be confirmed, the form offers direct booking or WhatsApp rather than silently resending.

Protected review deployments additionally use Vercel Authentication and its necessary access cookies. That reviewer sign-in is separate from the public booking journey and optional measurement choices.

Object or withdraw marketing consent

You can object to processing based on legitimate interests, including enquiry attribution, by emailing contact@vivobodystudio.com. You can object to direct marketing at any time. Withdraw a channel's marketing permission using the unsubscribe or opt-out route in the message, or contact us using the same email or WhatsApp number. Withdrawal does not affect the lawfulness of processing before it was withdrawn.

Declining future promotions does not cancel a booking or prevent necessary responses to your current request. Existing contact restrictions continue to apply. Optional website measurement remains off, including when a preference is saved in Privacy choices.

Access, correction and other rights

Depending on the circumstances, you can request access, correction, erasure, restriction or a portable copy of your information. Contact contact@vivobodystudio.com; we may need proportionate identity checks before releasing or changing a record. Some information may need to be retained for an applicable legal obligation or claim, and we will explain any restriction on a request.

You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. You may contact the ICO directly without first complaining to us. We will update this notice when the processing described changes; the date below identifies this version.

Choose your privacy preferences