About this policy
Spray Tans with Siddy is run by Siddy, a sole trader offering mobile spray tans across Birmingham and Solihull. This policy explains what personal information I keep, why, how long for, and your rights. I'm responsible for your information under UK data protection law.
If you have any questions, message me on WhatsApp or call me.
This website
This website doesn't collect any personal information itself. There's no contact form, no account to sign up for, and no tracking or advertising cookies.
The website is hosted by Netlify. Like all web hosts, Netlify's servers briefly record technical details such as your IP address when you visit, to keep the site secure and working. This is handled under Netlify's own privacy policy.
Bookings
Bookings are made through Fresha. When you book, Fresha collects your name, contact details, appointment history and payment details, and shares them with me so I can manage your appointment. Fresha handles this under its own privacy policy, which you'll see when you book.
Messages and calls
If you message me on WhatsApp or call me, I'll see your name (if you've given one), your phone number and what you've told me. I only use this to reply to you and arrange your appointment. WhatsApp is run by Meta, under its own privacy policy.
Consultation and patch test information
Before your first tan, I'll ask about things like skin conditions, allergies and pregnancy, so I can tan you safely. Because this is health information, I only keep it with your explicit consent, and I only use it to look after you during your treatments.
Photos
I only share photos of clients' tans on this website or my social media with the client's written consent. You can withdraw your consent at any time, and I'll remove the photo within 30 days.
Why I'm allowed to use your information
- To provide the treatment you've booked (to carry out our agreement).
- Consultation and health information, and photos: with your consent.
- Payment and business records: because the law requires me to keep them.
How long I keep it
- Messages that don't lead to a booking: deleted within 12 months.
- Your details and booking history: 2 years after your last appointment.
- Consultation and patch test records: 3 years after your last appointment, or longer if my insurer requires it.
- Payment and business records: 6 years, as required by HMRC.
- Photos: until you withdraw your consent.
Who I share it with
I never sell your information. I only share it where needed with:
- Fresha, for bookings and payments.
- My accountant, for tax and business records.
- My insurer, only if there's ever a claim.
Your rights
You have the right to:
- ask for a copy of the information I hold about you
- ask me to correct anything that's wrong
- ask me to delete your information (unless I have to keep it by law)
- withdraw your consent at any time
- object to how I use your information
To use any of these rights, message me on WhatsApp or call me. I'll reply within one month.
Changes to this policy
I'll update this page if anything changes. Last updated: 21/10/26.