top of page

Privacy Policy

Last updated: 31 August 2026

1. About this Privacy Policy

Face Values by Michelle James ("we", "us" or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal information when you:

  • visit our website;

  • contact us;

  • enquire about or book an aesthetic treatment;

  • purchase products or courses;

  • enquire about or attend one of our training courses;

  • register as a model for our training sessions;

  • communicate with us by telephone, email, WhatsApp or social media; or

  • otherwise interact with Face Values by Michelle James.

We process personal information in accordance with applicable UK data-protection law, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and applicable electronic communications and cookie legislation.

2. Who we are

The organisation responsible for your personal information is:

Face Values by Michelle James
Black Heart Training Academy
251–253 Wallasey Village
Wallasey
CH45 3LR
United Kingdom

Telephone: 07482 635 290
Email: facevaluesbymichellejames@gmail.com

For data-protection enquiries, please contact us using the email address above.

3. What personal information we collect

Depending on how you interact with us, we may collect some or all of the following information.

Contact information

  • Name

  • Email address

  • Telephone number

  • Address

  • Information contained in messages or enquiries you send to us

Booking and treatment information

If you enquire about or receive an aesthetic treatment from us, we may collect information such as:

  • Appointment details

  • Treatment history

  • Treatment preferences

  • Consultation information

  • Information about allergies, medications and relevant medical conditions

  • Information about previous aesthetic treatments

  • Relevant photographs, where appropriate

  • Treatment notes and aftercare information

  • Information necessary to assess your suitability for a treatment

Some of this information may constitute health information or other special-category personal data under data-protection law.

Training information

If you enquire about or participate in our training courses, we may collect:

  • Name and contact details

  • Course and booking information

  • Professional or business information

  • Training records

  • Assessment or completion information

  • Payment information

  • Information you provide in connection with your training

Model information

If you register or enquire about becoming a model for our training sessions, we may collect:

  • Name and contact details

  • Treatment preferences

  • Relevant medical or suitability information

  • Appointment information

  • Photographs where appropriate

  • Information required to assess suitability for a model treatment

Purchases and payments

When you purchase products, courses or other services, we may collect information necessary to process your order, such as:

  • Name

  • Billing and delivery information

  • Contact details

  • Order details

  • Payment status

Payments may be processed securely by Stripe. We do not store your full payment-card details.

Stripe may collect and process payment information in accordance with its own privacy policy and applicable data-protection requirements.

Website information

When you use our website, certain technical information may be collected automatically, including:

  • IP address

  • Browser and device information

  • Pages visited

  • Date and time of visits

  • Website usage information

  • Cookie and similar technology information

4. How we collect your information

We may collect personal information:

  • directly from you when you complete a form on our website;

  • when you contact us by telephone, email or message;

  • when you book an appointment;

  • when you purchase a product or course;

  • during consultations and treatments;

  • when you attend training;

  • when you register as a model;

  • when you communicate with us through WhatsApp or social media;

  • through third-party booking, payment or course platforms; and

  • automatically when you use our website through cookies and similar technologies.

5. Why we use your personal information

We use personal information for purposes including:

  • responding to enquiries;

  • arranging and managing appointments;

  • providing aesthetic treatments;

  • assessing treatment suitability;

  • maintaining appropriate treatment and consultation records;

  • providing aftercare and responding to treatment-related queries;

  • providing training and educational services;

  • managing model appointments;

  • processing orders and payments;

  • supplying products and courses;

  • communicating with you about your appointments, purchases or training;

  • managing our business and maintaining appropriate business records;

  • improving our services and website;

  • preventing fraud, misuse or other unlawful activity;

  • complying with our legal and regulatory obligations;

  • dealing with complaints, disputes or legal claims; and

  • sending marketing communications where we are legally permitted to do so and, where required, you have provided consent.

We will only use your information for purposes that are compatible with the purpose for which it was originally collected, unless the law allows or requires us to use it for another purpose.

6. Our lawful bases for processing

Under UK data-protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following lawful bases.

Contract

We may process your information where it is necessary to enter into or perform a contract with you, for example to:

  • provide a treatment;

  • process a purchase;

  • provide a training course; or

  • manage an appointment or booking.

Legal obligation

We may process your information where necessary to comply with a legal or regulatory obligation.

Legitimate interests

We may process your information where it is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.

This may include:

  • administering our business;

  • maintaining appropriate records;

  • managing enquiries;

  • improving our services;

  • protecting our business against fraud or misuse; and

  • dealing with complaints and legal claims.

Consent

Where the law requires consent, we will ask you for consent before processing your information for that purpose.

You can withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

7. Health and special-category information

Because we provide aesthetic treatments, we may need to collect information relating to your health, medical history, allergies, medications or other information relevant to your suitability for treatment.

Health information is classed as special-category personal data and is subject to additional legal protections.

We will only process such information where we have a lawful basis under Article 6 of the UK GDPR and an appropriate condition for processing special-category data under Article 9 and applicable UK law.

Where appropriate, this may include your explicit consent or another lawful condition that applies to the particular circumstances.

We will only collect information that is relevant and necessary for the treatment, consultation, training or other service being provided.

We will take appropriate steps to protect this information and restrict access to people who genuinely need it.

8. Photographs

Where photographs are taken as part of a consultation, treatment, training session or model treatment, they may form part of your treatment or training records.

We will not use identifiable photographs of you for advertising, social media, our website, training materials or other promotional purposes unless we have an appropriate lawful basis and, where required, your specific consent.

Where photographs are used for promotional purposes with your consent, you may withdraw that consent for future use at any time.

9. Marketing

We may occasionally send information about our treatments, courses, products, offers or other services.

Where required by law, we will only send electronic marketing communications where you have provided the appropriate consent or another lawful basis applies.

You can unsubscribe from marketing communications at any time by:

Even if you opt out of marketing, we may still contact you with important non-marketing information relating to an appointment, purchase, treatment, course or other service you have requested.

10. Who we share your information with

We may share personal information with trusted third parties where necessary to operate our business and provide our services.

These may include:

  • Wix, our website hosting and website-management provider;

  • Stripe, for processing payments;

  • appointment and booking platforms;

  • course and training platforms;

  • email and communication providers;

  • IT and software providers;

  • delivery and fulfilment providers where applicable;

  • professional advisers such as accountants, insurers or legal advisers;

  • regulators, government bodies or law-enforcement agencies where required or permitted by law; and

  • other service providers acting on our behalf.

We only share information where there is a legitimate reason to do so and, where required, appropriate contractual and data-protection safeguards are in place.

We do not sell your personal information.

11. Third-party websites and services

Our website contains links to third-party websites and services.

These may include booking, social-media, communication, payment and other external platforms.

When you leave our website and use a third-party service, that organisation may collect and process your information under its own privacy policy.

We recommend that you read the privacy information provided by any third-party service before submitting personal information to it.

12. Cookies

Our website uses cookies and similar technologies.

Cookies are small text files placed on your device which can help a website function correctly, remember preferences, maintain security and understand how visitors use the website.

Some cookies are essential for the website to operate. Other cookies, such as analytics or advertising cookies, may require your consent.

Our website is hosted using Wix, which may use cookies for purposes including security, website functionality and platform performance.

Where non-essential cookies are used, you may be asked to provide consent before they are placed on your device.

You can manage or withdraw your cookie preferences through the cookie settings available on our website and through your browser settings.

Please note that disabling certain cookies may affect how parts of the website function.

13. How we protect your information

We take reasonable and appropriate technical and organisational measures to protect personal information against:

  • unauthorised access;

  • accidental loss;

  • destruction;

  • misuse;

  • alteration; or

  • unauthorised disclosure.

Access to personal information is limited to people who need it for legitimate business purposes.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

14. How long we keep your information

We generally retain personal information for 12 months from the date it is no longer required for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

Certain information may need to be retained for longer than 12 months where we have a legal, regulatory, accounting, insurance or other legitimate obligation to do so.

For example, financial and tax records will be retained for the period required by applicable legal and accounting requirements.

Treatment and consultation information may also be retained for longer where reasonably necessary to comply with legal, regulatory, insurance or professional requirements, or to establish, exercise or defend legal claims.

When personal information is no longer required, we will securely delete it or anonymise it where appropriate.

15. International transfers

Some of the third-party services we use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data-protection law and that appropriate safeguards are in place where required.

These safeguards may include an adequacy decision or appropriate contractual or other legal safeguards.

16. Your data-protection rights

Depending on the circumstances and the legal basis for processing, you may have rights under UK data-protection law, including the right to:

  • ask for access to the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to delete your personal information in certain circumstances;

  • ask us to restrict processing in certain circumstances;

  • object to certain processing, including direct marketing;

  • withdraw consent where processing is based on consent;

  • request portability of certain personal information; and

  • complain to the Information Commissioner's Office.

These rights are not absolute and certain legal exceptions may apply.

If you wish to exercise your rights, please contact:

Email: facevaluesbymichellejames@gmail.com
Telephone: 07482 635 290

We may need to verify your identity before responding to a request.

17. Right to object to direct marketing

You have an absolute right to object to the processing of your personal information for direct marketing purposes.

If you object to direct marketing, we will stop processing your information for that purpose.

18. Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we have an opportunity to resolve the issue.

You also have the right to complain to the UK's supervisory authority for data protection:

Information Commissioner's Office (ICO)

You can find information about making a complaint on the ICO's website:

Information Commissioner's Office

19. Children's information

Our services are primarily intended for adults.

We do not knowingly collect personal information from children through our website unless this is necessary for a specific service and appropriate arrangements are in place.

If you believe that a child has provided us with personal information without appropriate consent or authorisation, please contact us.

20. Automated decision-making

We do not use your personal information to make solely automated decisions that produce legal or similarly significant effects on you.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or legal requirements.

The latest version will always be published on our website, together with the date it was last updated.

We recommend checking this page periodically.

22. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Face Values by Michelle James
Black Heart Training Academy
251–253 Wallasey Village
Wallasey
CH45 3LR
United Kingdom

Telephone: 07482 635 290
Email: facevaluesbymichellejames@gmail.com

Last updated: 31 August 2026

bottom of page