Privacy policy

Last updated: August 14, 2026

Luresto operates this website and provides aesthetics, cosmetology, skincare, hair and scalp treatments, consultations, appointment booking and related services (the "Services").

Our website is powered by Shopify, which enables us to provide our online Services to you.

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, book an appointment, receive a treatment or consultation, make a payment, communicate with us or otherwise use our Services.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing or disclosure of personal information, this Privacy Policy will apply.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies you or can reasonably be linked to you.

Depending on how you interact with us, we may collect or process the following categories of personal information:

  • Contact details, including your name, billing address, telephone number and email address.

  • Booking and appointment information, including treatments or consultations booked, appointment dates and times, cancellations, rescheduling requests and previous appointments.

  • Financial information, including payment information, transaction details, payment method and payment confirmation.

  • Account information, where applicable, including username, password, preferences and account settings.

  • Treatment and consultation information, including information you provide during consultations or before receiving a treatment.

  • Health-related information, where relevant to determining whether a treatment is suitable for you, which may include information concerning allergies, medications, medical conditions, previous treatments or other relevant health information.

  • Communications with us, including information you provide when contacting us regarding appointments, treatments, customer support or other enquiries.

  • Device information, including information about your device, browser, network connection, IP address and other technical identifiers.

  • Usage information, including information about how and when you access, navigate and interact with our website and Services.

Health and Treatment Information

Certain treatments may require us to collect information relating to your health, medical history, allergies, medications, previous procedures or other circumstances that may affect the suitability or safety of a treatment.

We only request information that is reasonably relevant to assessing treatment suitability, providing our Services and maintaining appropriate treatment or consultation records.

Where health-related information constitutes special category personal data under applicable data protection law, we process this information only where we have an appropriate lawful basis and an applicable legal condition for processing such information.

We may use this information to:

  • Assess whether a treatment is suitable for you.

  • Identify potential contraindications or risks.

  • Personalise treatments and recommendations.

  • Provide appropriate cosmetology or aesthetic services.

  • Maintain relevant treatment and consultation records.

  • Respond appropriately to treatment-related concerns.

Health-related information will not be used for unrelated advertising or promotional purposes without an appropriate legal basis.

Personal Information Sources

We may collect personal information:

  • Directly from you, including when you make a booking, complete a consultation or treatment form, communicate with us, make a payment or otherwise provide information to us.

  • Automatically through our website, including through your device, browser, cookies and similar technologies.

  • From our service providers, including providers that help us operate our website, process payments, manage bookings or provide other business services.

  • From partners or other third parties, where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes:

Providing and Managing Our Services

We may use personal information to:

  • Process and manage appointment bookings.

  • Confirm, reschedule or cancel appointments.

  • Process payments and refunds.

  • Provide treatments and consultations.

  • Assess treatment suitability.

  • Maintain relevant treatment and customer records.

  • Provide personalised treatment or skincare recommendations.

  • Respond to questions regarding our Services.

  • Maintain and manage customer accounts where applicable.

  • Improve and personalise our Services.

Communications

We may use your contact information to send appointment confirmations, reminders, booking updates, treatment-related information and customer service communications.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to send marketing or promotional communications relating to our Services.

You may unsubscribe from promotional email communications at any time by using the unsubscribe option included in our emails.

Unsubscribing from marketing communications will not prevent us from sending non-promotional communications relating to your appointments, payments or Services.

Security and Fraud Prevention

We may use personal information to maintain the security of our website and Services, authenticate accounts, prevent fraudulent or unlawful activity, protect our customers and business and investigate suspicious activity.

If you create an account, you are responsible for keeping your account credentials confidential.

Legal and Regulatory Purposes

We may process personal information where reasonably necessary to comply with applicable laws, regulatory requirements, lawful requests from public authorities, establish or defend legal claims, enforce our policies or protect our legal rights.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties where reasonably necessary to operate our business and provide our Services.

This may include:

  • Shopify, which provides the ecommerce and website infrastructure used to operate our website.

  • Payment processors that process payments on our behalf.

  • Booking, IT, hosting, analytics, customer support and cloud service providers that help us operate our Services.

  • Professional advisers, where necessary for legal, accounting, compliance or other professional purposes.

  • Marketing and advertising partners, where permitted by applicable law.

  • Government authorities, regulators or law enforcement, where disclosure is legally required.

  • Parties involved in a legitimate corporate transaction, such as a merger, acquisition, restructuring or sale of the business.

We may also disclose information where you specifically request or consent to the disclosure.

Relationship with Shopify

Our website is hosted and supported by Shopify.

Shopify may collect and process personal information relating to your access to and use of our website in order to provide and improve the services Shopify provides to us and to you.

Information submitted through our website may therefore be processed by Shopify and relevant service providers, including providers located outside the country in which you reside.

Shopify may also process certain information independently in accordance with its own privacy practices.

Additional information regarding Shopify's processing of personal information and the privacy rights available to Shopify users is available through Shopify's Consumer Privacy Policy and Privacy Portal.

Cookies and Similar Technologies

Our website and service providers may use cookies and similar technologies to operate the website, remember preferences, understand how visitors use our Services, maintain security and, where permitted, provide personalised advertising.

Depending on your location, you may be able to manage certain cookie and privacy preferences through the options provided on our website or through your browser settings.

Third-Party Websites and Links

Our Services may contain links to websites or online services operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites that we do not control.

We recommend reviewing the privacy policies of any third-party website or service before providing personal information.

Children's Data

Our Services are not intended for use by children without appropriate involvement from a parent or legal guardian where required by applicable law.

We do not knowingly collect personal information from children in circumstances where doing so would not be permitted.

If you are a parent or guardian and believe that a child has provided personal information to us inappropriately, please contact us so that we can review and, where appropriate, delete the information.

Security and Retention of Your Information

We take reasonable organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no electronic storage or transmission method can guarantee absolute security.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our Services, maintaining appropriate business or treatment records, complying with legal and regulatory obligations, resolving disputes and enforcing agreements.

Different categories of personal information may therefore be retained for different periods.

Your Rights and Choices

Depending on where you live and subject to applicable law, you may have rights regarding your personal information, including:

  • Right of access — you may request access to personal information we hold about you.

  • Right to correction — you may request correction of inaccurate or incomplete personal information.

  • Right to deletion — in certain circumstances, you may request deletion of personal information.

  • Right to restriction — you may have the right to request that we restrict certain processing.

  • Right to object — you may have the right to object to certain uses of your personal information.

  • Right to data portability — in certain circumstances, you may request a copy of your personal information in a portable format.

  • Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

These rights are not absolute and may be subject to legal exceptions.

We may need to verify your identity before processing a privacy rights request.

Marketing Preferences

You may opt out of promotional emails at any time using the unsubscribe option contained in our marketing communications.

Even if you opt out of promotional communications, we may continue to contact you regarding appointments, payments, consultations, treatments, changes to our Services or other non-promotional matters.

Complaints

If you have concerns or complaints regarding how we process your personal information, please contact us using the details below.

Depending on where you reside, you may also have the right to submit a complaint to the relevant data protection supervisory authority.

International Transfers

Some of our service providers, including providers supporting our website and payment infrastructure, may process information outside the United Kingdom or the country in which you reside.

Where personal information is transferred internationally, we take appropriate measures where required by applicable data protection law to ensure that the information receives an appropriate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, legal requirements or other operational reasons.

When we update this Privacy Policy, we will update the "Last updated" date displayed at the top of this page and provide any additional notice required by applicable law.

Contact

If you have questions about this Privacy Policy, our privacy practices or would like to exercise your privacy rights, please contact us:

Email: info@luresto.com
Phone: +44 7656 756785
Address: 167-169 Great Portland Street, London W1W 5PF, United Kingdom

For the purposes of applicable data protection law, Luresto is the controller of the personal information described in this Privacy Policy.