Skip to main content

Natural Skincare Shop – Bbonita

USE CODE BBONITA10 FOR 10% OFF NON-SALE ITEMS ✦ FREE UK DELIVERY OVER £90 ✦ SKINCARE, CANDLES & GIFTS ✦ ALWAYS FRESHLY HANDMADE ✦

Privacy policy

Bbonita | Mobile Beauty & Wellness Services

Last updated: 29 October 2026

 

At Bbonita, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how BBONITA LTD collects, uses, stores and protects personal data when you visit our website, enquire about our services, book an appointment, purchase our products or communicate with us.

We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

Legal name: BBONITA LTD
Company number: 14047826
Registered office: 71–75 Shelton Street, London, England, WC2H 9JQ, United Kingdom
Website: https://bbonita.co.uk
Online shop: https://shop.bbonita.co.uk

BBONITA LTD is the data controller responsible for the personal information processed for the purposes described in this policy.

For privacy-related enquiries, please contact us using the contact form on our website or write to our registered office at the address above.

2. Personal Information We Collect

Depending on how you interact with Bbonita, we may collect:

  • Contact information: your name, email address, telephone number and correspondence.

  • Booking information: appointment dates, selected treatments, booking history, service addresses and preferences.

  • Treatment-related information: relevant allergies, sensitivities, health conditions, contraindications or other information you voluntarily provide to help us assess the suitability and safety of a treatment.

  • Order information: products purchased, delivery details, transaction records, refunds and customer-service correspondence.

  • Marketing information: newsletter subscriptions, communication preferences and relevant engagement information.

  • Technical information: IP address, browser type, device information, approximate location derived from technical data, website usage and cookie preferences.

We collect information directly from you, through our website and booking systems, and where appropriate through the service providers involved in your booking or purchase.

Please avoid submitting unnecessary sensitive personal information through general contact forms.

3. How We Use Your Information

We use personal information to:

  • Respond to enquiries and provide customer support.

  • Arrange, confirm, manage and deliver beauty and wellness appointments.

  • Assess treatment suitability and help provide services safely.

  • Process product orders, payments, deliveries, returns and refunds.

  • Maintain business, transaction and accounting records.

  • Communicate important information about your appointments or orders.

  • Send marketing communications where legally permitted.

  • Understand website performance and improve our services.

  • Maintain website security, prevent abuse and protect our business.

  • Comply with applicable legal and regulatory obligations.

We do not sell your personal information to third parties.

4. Our Legal Bases for Processing

We rely on different legal bases depending on the activity:

Purpose Legal basis
Managing bookings and providing purchased services Performance of a contract or steps taken before entering a contract
Processing orders and customer payments Performance of a contract
Responding to general enquiries Legitimate interests or steps taken before entering a contract, as appropriate
Maintaining accounting and legally required records Legal obligation
Protecting our website and preventing fraud Legitimate interests, or legal obligation where applicable
Sending consent-based marketing Consent
Using non-essential analytics and advertising cookies Consent, subject to applicable legal requirements

Where we collect information about your health, allergies or treatment contraindications, this may constitute special category personal data. We will collect only information relevant to the proposed treatment and identify an appropriate legal basis and additional UK GDPR condition before processing it. Where explicit consent is required, we will request it separately.

5. Appointments and Treatment Information

We use booking and appointment-management tools, including Amelia, to organise our services.

When you make a booking, we may process your contact details, selected service, appointment time, service location and relevant communications.

If treatment-related information is necessary, access is restricted to those who need it to assess or provide your treatment. We do not use health-related information for unrelated advertising or marketing.

Providing some information may be necessary to complete a booking or safely deliver a service. If we cannot obtain essential information, we may be unable to provide the requested treatment.

6. Online Shop, Orders and Payments

When you purchase products through our online shop at https://shop.bbonita.co.uk, we collect and process information needed to manage and fulfil your order.

This may include your name, billing and delivery addresses, email address, telephone number, products purchased, order history, payment status, shipping information, returns and refund requests.

Our online shop uses WooCommerce to manage product purchases, shopping baskets, checkout and customer orders.

Payments may be processed through Stripe or other payment providers made available at checkout. These providers process payment information according to their own privacy policies and applicable security requirements. BBONITA LTD receives transaction details and payment confirmations necessary to manage orders, but does not require customers to provide complete card information through our contact forms or email.

We may share relevant delivery information with postal and courier services to fulfil your order.

We retain transaction and accounting records for the periods required by applicable law.

7. Marketing Communications

If you subscribe to our newsletter or agree to receive promotional messages, we may use Mailchimp to manage and deliver those communications.

We may send you information about Bbonita products, services, promotions and relevant business updates where we have a lawful basis to do so.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in those messages or by contacting us.

Withdrawing marketing consent will not affect essential transactional communications relating to your appointments or orders.

8. Cookies and Similar Technologies

Our online shop uses cookies and similar technologies to provide essential shopping functionality and support website security.

These may include:

  • Strictly necessary cookies: used to maintain shopping basket contents, support checkout, manage customer sessions and provide essential security functions.

  • Functional cookies: used for optional website features and customer preferences.

  • Analytics cookies: used to understand website traffic and improve the shopping experience, where permitted.

  • Advertising and marketing cookies: used by advertising or marketing services where these are enabled and the required consent has been obtained.

WooCommerce may use cookies such as woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_* to maintain shopping basket and session functionality.

Where consent is legally required, non-essential cookies and similar technologies will be used only after the relevant consent has been obtained.

You can manage your cookie preferences through the consent controls available on the website, where provided, and through your browser settings.

For further information about our privacy practices, please contact BBONITA LTD using the details provided in this policy.

9. Third-Party Service Providers

We use external platforms and technical services to operate our website and business. These may include:

  • Hostinger: website hosting and related infrastructure.

  • WordPress and Elementor: website content and functionality.

  • Amelia: appointment scheduling and booking management.

  • WPForms: website enquiries and forms.

  • WooCommerce: online shop and order management.

  • Google Analytics: website analytics.

  • Google AdSense: advertising-related functionality.

  • Mailchimp: email marketing.

  • Wordfence: website security and threat prevention.

  • Cookiez: cookie preferences and consent management.

  • Payment and delivery providers: processing payments and fulfilling orders.

These providers may process personal data on our behalf or, in some circumstances, as independent data controllers.

We share only information reasonably necessary for the relevant service and seek to use appropriate contractual and security safeguards.

10. International Data Transfers

Some of our technology providers may process or store information outside the United Kingdom.

Where personal data is transferred internationally, we take steps to ensure that an appropriate transfer mechanism and safeguards are in place where required by UK data protection law. These may include UK adequacy regulations, approved contractual safeguards or other permitted arrangements.

11. How Long We Keep Your Data

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, tax, accounting and dispute-resolution requirements.

Retention periods depend on the type of information:

  • Booking and treatment records: retained for an appropriate period having regard to service delivery, safety, potential claims and legal requirements.

  • Order and accounting records: retained for the period required by applicable financial and tax obligations.

  • General enquiries: retained only for as long as needed to respond and manage any relevant follow-up.

  • Marketing information: retained until you unsubscribe, withdraw consent or the information is no longer required, subject to any necessary suppression records.

  • Security and technical information: retained according to legitimate security needs and applicable provider settings.

When personal information is no longer required, we will delete, anonymise or securely dispose of it where reasonably practicable.

12. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, misuse, accidental loss, alteration and disclosure.

These measures may include website security tools, access controls, software maintenance, restricted administrative permissions and appropriate service-provider safeguards.

No website or internet transmission can be guaranteed completely secure.

13. Your Data Protection Rights

Subject to applicable law and any relevant exceptions, you may have the right to:

  • Request access to personal information we hold about you.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of personal information.

  • Request restriction of certain processing.

  • Object to processing based on legitimate interests.

  • Request transfer of eligible personal information.

  • Withdraw consent at any time where processing relies on consent.

  • Challenge certain decisions made solely by automated means, where applicable.

To exercise your rights, contact us through our website or write to our registered office.

We may need to verify your identity before fulfilling a request. We aim to respond within the period required by applicable data protection legislation.

14. Complaints

If you have concerns about how your personal information is handled, please contact us so that we can investigate.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK data protection regulator.

Website: https://ico.org.uk

15. Links to Other Websites

Our website may contain links to third-party websites, social media platforms or external services.

We are not responsible for the privacy practices of websites operated by other organisations. We encourage you to review their privacy notices before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology providers, business practices or legal requirements.

The latest version will be published on our website, together with its revision date.

17. Contact Us

BBONITA LTD
Company number: 14047826
71–75 Shelton Street
London, England
WC2H 9JQ
United Kingdom

Website: https://bbonita.co.uk

For data protection enquiries, please use the contact form available on our website or write to our registered office.