Body Studio Skincare ("we", "us", "Body Studio") respects your privacy. This policy explains how we collect, use, store, and protect your personal data when you visit bodystudioskincare.com, book appointments, visit our clinics, or communicate with us.

We are a data controller under the Data Protection Act, 2020 of Jamaica. Registration with the Office of the Information Commissioner (OIC) is in progress.

1. Who we are
 

Body Studio Skincare
Locations: Mall Plaza, 20 Constant Spring Rd, Kingston; Fairview Shopping Center (Fontana side), Montego Bay
Email: studiocosmeceuticals@gmail.com · Phone: 876-908-0438 (Kingston) · 876-684-9800 (Montego Bay)
Data Protection contact: Michelle Vernon, studiocosmeceuticals@gmail.com

2. Personal data we collect
 

• Identity and contact: name, email, phone, address

• Booking and account: appointment history, service preferences, deposits and payments

• Health and treatment-related: information you provide in intake forms, consultation notes, contraindications, treatment records, before/after photos (with consent)

• Communications: messages via contact form, email, WhatsApp, phone, and social media

• Marketing preferences: newsletter sign-ups and opt-in consent

• Technical: IP address, browser type, cookies (see Cookie Notice)

3. How we collect data
 

• Website contact form and newsletter subscription

• Online booking (Wix and future booking platforms)

• In-clinic intake and consent forms (DaySmart and successor systems)

• Phone, WhatsApp, and in-person conversations

• Social media interactions (Instagram, Facebook)

• Cookies and similar technologies on our website

4. Why we use your data (lawful purposes)
 

• To book, confirm, and manage appointments

• To provide consultations and treatments safely

• To process deposits and payments

• To send service-related messages (confirmations, reminders, aftercare)

• To comply with legal, regulatory, and insurance obligations

• To improve our services and website

• For marketing only where you have given separate consent

5. Whom we share data with
 

We share personal data only where necessary with trusted processors, including:

• Website host (Wix)

• Appointment and client management (DaySmart and successor platforms)

• Payment processors

• Email and messaging providers

• Meta (Facebook, Instagram, WhatsApp Business), where you contact us on those channels

• Google (Analytics / Business Profile) where enabled

• Professional advisers (legal, accounting) where required
   

We require processors to protect your data by contract. We do not sell your personal data.

6. International transfers
 

Some providers store data outside Jamaica (including the United States). Where this occurs, we rely on appropriate safeguards required under the Data Protection Act and vendor terms.

7. How long do we keep data
 

• Client treatment records: 7 years after last treatment, or as required by law and professional guidance

• Marketing lists: until you unsubscribe or withdraw consent

• Payment records: as required for tax and accounting law

• Before/after images: for as long as your Photo & Media Consent remains in effect, or until you withdraw consent