Privacy Policy

Who we are

This policy explains how the organisation operating the Manücci website collects and uses personal information. Controller identity, company number, registered office, privacy contact and any Data Protection Officer: [REQUIRES CLIENT CONFIRMATION].

Information we collect and why

The final policy must reflect the production forms, integrations and business processes. A purpose and UK GDPR lawful basis must be documented for every use.

• Contact and consultation enquiries: exact fields, purpose, lawful basis and retention to be confirmed.
• Appointment booking: provider, data, purpose, lawful basis and retention to be confirmed.
• Client onboarding and service delivery: confirm whether a separate client privacy notice applies.
• Email updates: confirm consent or another permitted basis, provider and suppression process.
• Website security, diagnostics, analytics and preferences: confirm exact technologies and PECR position.
• Legal, tax, anti-money-laundering and professional records: confirm applicable duties and retention.

Where information comes from

Information may come directly from you and through this website. Referral partners, public registers, identity services and any other indirect sources: [REQUIRES CLIENT CONFIRMATION].

Who receives information

Hosting, form delivery, email, booking, CRM, analytics, consent, security and professional-service recipients or processors: [REQUIRES CLIENT CONFIRMATION]. Information may also be disclosed where required by law or to advisers under duties of confidentiality.

International transfers

Countries, transfer routes and safeguards for information processed outside the UK: [REQUIRES CLIENT CONFIRMATION].

Retention

Information is kept only for as long as needed for the stated purpose and applicable legal, tax, professional and dispute-management requirements. The approved retention schedule is [REQUIRES CLIENT CONFIRMATION].

Marketing choices

You can ask us to stop direct marketing at any time using the unsubscribe option or the confirmed privacy contact. Stopping marketing does not require deletion of information retained for another lawful purpose.

Automated decisions

Whether any solely automated decision with legal or similarly significant effects, or any profiling, occurs: [REQUIRES CLIENT CONFIRMATION].

Your rights

Rights are not absolute. Identity may need to be verified. The confirmed privacy contact is [REQUIRES CLIENT CONFIRMATION]. ICO complaints are available through ico.org.uk/make-a-complaint.

• Request access to personal information.
• Correct inaccurate or incomplete information.
• Request erasure or restriction where applicable.
• Object to certain uses, including direct marketing.
• Request portability where the right applies.
• Withdraw consent without affecting earlier lawful processing.
• Complain to the Information Commissioner's Office.

Security and other websites

Proportionate security measures are used, but the approved public description and any certifications or encryption claims are [REQUIRES CLIENT CONFIRMATION]. External websites are responsible for their own privacy practices.

Changes

This policy will be updated when practices or legal obligations change. Material changes will be explained here and the effective date updated.