GDPR Information

Last Updated: July 21, 2026

Our Commitment to Data Protection

jolly-moon is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page provides detailed information about how we handle your personal data and your rights under these regulations.

Data Controller

For the purposes of GDPR, the data controller is:

jolly-moon
42 Aldwych Lane
Covent Garden
London WC2B 4JH
United Kingdom
Email: [email protected]

What Personal Data We Collect

We collect and process the following categories of personal data:

• Identity Data: Your full name
• Contact Data: Email address, postal address
• Transaction Data: Details about services you have inquired about or purchased
• Technical Data: IP address, browser type, device information, and usage data
• Marketing Data: Your preferences for receiving communications from us

How We Collect Your Personal Data

We collect personal data through:

• Direct interactions when you submit forms on our website
• Automated technologies such as cookies when you browse our website
• Third-party sources such as analytics providers

Legal Bases for Processing

We process your personal data only when we have a legal basis to do so. The legal bases we rely on include:

• Consent: You have explicitly agreed to our processing of your personal data for specific purposes.
• Contractual Necessity: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Processing is required to comply with legal or regulatory requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms.

How We Use Your Personal Data

We use your personal data for the following purposes:

• To provide and manage the services you have requested
• To communicate with you about appointments, inquiries, and service updates
• To improve our website and services based on your feedback and usage patterns
• To ensure the security and integrity of our website
• To comply with legal and regulatory obligations

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Client inquiry data: Retained for up to 2 years from last contact
• Client treatment records: Retained for up to 7 years as required by professional standards
• Website analytics data: Retained for up to 26 months

After the retention period expires, we will securely delete or anonymize your personal data.

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

1. Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request."

2. Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

3. Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, such as when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

4. Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another organization.

6. Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis.

7. Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.

How to Exercise Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. Please include the following information in your request:

• Your full name and contact details
• A clear description of the data or action you are requesting
• Proof of identity (if required for security purposes)

We will respond to your request within one month, although this may be extended by two additional months in complex cases. We will inform you if an extension is necessary.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Staff training on data protection principles
• Incident response procedures for data breaches

International Data Transfers

If we transfer your personal data outside the European Economic Area or United Kingdom, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Other legally approved transfer mechanisms

Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Phone: 0303 123 1113
Website: ico.org.uk

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our data processing practices or legal requirements. Please check this page periodically for updates.

Contact Us

If you have any questions about our GDPR compliance or wish to exercise your rights, please contact us at [email protected].