Privacy Policy

Last updated: July 2026

1. Introduction

Yumiko Inoue Wellness and Beauty ("we", "our", "us") respects your privacy. This notice explains how we collect, use, and protect your personal information when you visit www.yumikoinoue.com or book a treatment.

Our physical trading address is: Yumiko Inoue Wellness and Beauty, c/o Kensington MediSpa at Royal Garden Hotel, 2-24 Kensington High St, London W8 4PT.

2. What Personal Information We Collect

We collect the minimum amount of information necessary to operate our platform and provide therapies:

  • Contact Details Your name, email address, phone number, and any custom messages submitted via our booking and SMS inquiry forms.
  • Special Category Data Explicit medical history, post-operative records, chronic conditions, or pregnancy statuses voluntarily submitted to evaluate the physiological safety of lymphatic drainage or reflexology treatments.
  • Technical Infrastructure Data Your Internet Protocol (IP) address, browser type, and localisation parameters to route you to the correct regional website and secure our network, collected via our self-hosted Rybbit analytics.
  • Security and Performance Telemetry Anonymised loading speeds and layout shift metrics processed via Vercel, alongside automated bot-detection telemetry processed by Cloudflare to secure our platform endpoints.

3. Our Lawful Basis for Processing

Under the UK GDPR, our lawful bases for processing your data are:

  • Explicit Consent (Article 9) To process any physiological symptoms or medical history prior to executing physical wellness therapies. For clients under 16, this consent must be provided by a parent or legal guardian.
  • Contract To manage appointment updates, course enrolments, billing, and treatment schedules.
  • Legitimate Interests To monitor website performance, remember your language preferences, and secure our edge network infrastructure against malicious traffic or automated abuse.

4. User-Generated Content and Reviews

With the explicit consent of our clients, we display testimonials and reviews on our platform. Please note that public reviews are accessible to all visitors. If a review includes information concerning your health or treatment outcomes, it constitutes public processing of special category data. You maintain the absolute right to request the immediate removal or anonymisation of your review at any time.

5. Cookies and Localisation

Our analytics architecture is cookieless. We do not process third-party advertising trackers. We utilise a single strictly necessary functional cookie (`NEXT_LOCALE`) solely to remember your regional language preference.

6. Children's Data

We provide holistic therapies to minors. For clients under the age of 16, we require explicit written consent from a parent or legal guardian to collect and process their special category health data. If we become aware that we have collected health data from a minor under 16 without verified parental consent, we will securely erase that information.

7. How Long We Keep Your Information

We retain clinical treatment records, booking inquiries, and communication history for the entire duration of your active client relationship with us. To ensure comprehensive historical context for returning clients, and to comply with statutory limitation periods and UK professional indemnity insurance protocols, all records are archived for a period of 7 years following your last interaction with us before being securely destroyed.

8. Data Sharing and International Transfers

We do not sell your personal data. Information is shared only with trusted infrastructure providers (e.g., Vercel, Cloudflare, secure database hosting) required to run this platform. Because our therapies are occasionally delivered on a freelance basis overseas, your data may be processed outside the UK. We ensure your data remains protected by relying on UK adequacy regulations or appropriate safeguards, such as the International Data Transfer Agreement (IDTA), in accordance with the UK GDPR.

9. Your Rights

Under data protection law, you have rights including:

  • The right to access, correct, or request erasure of your personal data.
  • The right to withdraw consent at any time for health data processing or review displays.
  • The right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK (www.ico.org.uk).

To exercise any of these rights, please contact us at [email protected].