Privacy Notice

Last updated: July 2026

1. Introduction

Yumiko Inoue Wellness and Beauty ("we", "our", "us") respects your privacy. This notice explains how we collect and use your personal information when you visit www.yumikoinoue.com or book a treatment.

Our physical trading address is: Yumiko Inoue Wellness and Beauty, c/o Kensington MediSpa at Royal Garden Hotel, 2-24 Kensington High St, London W8 4PT.

2. What Personal Information We Collect

We collect the minimum amount of information necessary to operate our platform and provide therapies:

  • Contact Details: Your name, email address, phone number, and any custom messages submitted via our booking forms.
  • Special Category Data: Explicit medical history, post-operative records, or pregnancy statuses voluntarily submitted to evaluate the safety of lymphatic drainage or reflexology treatments.
  • Technical Infrastructure Data: Your Internet Protocol (IP) address, browser type, and localization parameters to route you to the correct regional website and secure our network, collected via our self-hosted Rybbit analytics.
  • Performance Telemetry: Anonymized loading speeds and layout shift metrics processed via Vercel to optimize core web vitals.

3. Our Lawful Basis for Processing

Under the UK GDPR, our lawful bases for processing your data are:

  • Explicit Consent (Article 9): To process any physiological symptoms or medical history prior to executing physical wellness therapies.
  • Contract: To manage appointment updates, billing, and treatment schedules.
  • Legitimate Interests: To monitor website performance, remember your language preferences, and secure our edge network infrastructure.

4. Cookies and Localization

Our analytics architecture is cookieless. We do not process third-party advertising trackers. We utilize a single strictly necessary functional cookie (`NEXT_LOCALE`) solely to remember your regional language preference (e.g., UK, US, or Japan).

5. How Long We Keep Your Information

General booking inquiries are securely destroyed or anonymized after 12 months. Clinical client treatment records and health intake forms are securely archived for a minimum of 7 years to comply with standard UK professional indemnity insurance protocols for health practitioners.

6. Data Sharing and International Transfers

We do not sell your personal data. Information is shared only with trusted infrastructure providers (e.g., Vercel, secure database hosting) required to run this platform. Because our therapies are occasionally delivered on a freelance basis in Japan, your data may be processed across borders. We rely on the mutual adequacy decisions between the UK GDPR and Japan's Act on the Protection of Personal Information (APPI) to ensure your data remains protected.

7. Your Rights

Under data protection law, you have rights including:

  • The right to access, correct, or request erasure of your personal data.
  • The right to withdraw consent at any time for health data processing.
  • The right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK (www.ico.org.uk) or the Personal Information Protection Commission (PPC) in Japan.

To exercise any of these rights, please contact us at [email protected].