At Henko Studio, your privacy matters to us. This Privacy Notice explains how we collect, use and protect your personal data when you book with us, visit our studio, or use our website. We aim to be transparent, respectful and compliant with UK data protection law.

1. Who we are

MARTORE STUDIO LTD, trading as Henko Studio, is the data controller for your personal data.

Registered & trading address: 72 Rochester Row, London, SW1P 1JU, United Kingdom
Company number: 16029616
VAT: GB494624557
Email: hello@henkostudio.co.uk
Telephone: 020 4597 4768

2. What personal data we collect

Depending on how you interact with us, we may collect:

  • Identity & contact data – name, email address, telephone number.
  • Booking & service data – appointments, services booked, treatment history, preferences and consultation notes.
  • Payment data – payment confirmations and transaction details (payments are processed securely via Timely Pay / Stripe; we do not store full card details).
  • Health & consultation data – limited health information relevant to treatments (such as allergies, patch-test results or pregnancy disclosures).
  • Marketing preferences – your choices about receiving marketing communications.
  • Website & technical data – IP address, device and browser information, pages visited and interactions, collected via cookies and similar technologies.

3. Special category data (health information)

Where we process health-related information, we do so only where necessary for your safety and care and with your explicit consent. You can withdraw your consent at any time. If consent is withdrawn, we may be unable to provide certain treatments.

4. How and why we use your data (lawful bases)

We process your personal data under the following lawful bases:

  • Contract – to manage bookings, provide treatments and deliver our services.
  • Legitimate interests – to operate our studio safely and efficiently, respond to enquiries, improve our services, and prevent fraud.
  • Legal obligation – to comply with tax, accounting, insurance and regulatory requirements.
  • Consent – for health-related data and for marketing communications where required.

5. Children

We do not provide colour services to under-16s. Clients under 18 may require parent or guardian consent for certain services. Our website and marketing are directed at adults.

6. Who we share your data with

We only share your personal data where necessary and with trusted third parties, including:

  • Timely – appointment booking and client records.
  • Timely Pay (powered by Stripe) – secure payment processing, including Apple Pay and Google Pay.
  • Website and analytics providers – including Google Analytics and Google Ads.
  • Professional advisers and insurers – where required.
  • Our bank and accountants – for payment settlement and accounting.

We do not sell your personal data.

7. International transfers

Some of our service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses or adequacy decisions.

8. Data security

We use appropriate technical and organisational measures to protect your personal data, including secure systems, encryption in transit, access controls and staff training. While no system is completely secure, we work to protect your data to industry standards.

9. Data retention

We retain personal data only for as long as necessary:

  • Client and appointment records: up to 7 years after your last appointment (or longer where required by insurers or law).
  • Health and patch-test records: up to 2 years after the last relevant treatment or test, unless a longer period is required.
  • Financial and tax records: at least 6 years from the end of the financial year.
  • Marketing data: until you withdraw consent or unsubscribe (we retain minimal suppression data to respect opt-outs).

10. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Request erasure of your data in certain circumstances.
  • Restrict or object to processing, including direct marketing.
  • Request data portability.
  • Withdraw consent at any time where processing relies on consent.

To exercise your rights, please contact hello@henkostudio.co.uk. We may need to verify your identity.

11. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

 

Last updated: January 2026