PRIVACY POLICY

The business responsible for deciding why and how your personal information is processed is the owner trading as VSN CUTZ in Berkshire, United Kingdom.

Legal owner / business name: Legal business name · Required before publication

Address: Business address · Required before publication

Privacy contact: Privacy email · Required before publication

ICO registration reference: ICO reference (if applicable) · Required before publication

VSN CUTZ is not described as a limited company. That will only be stated here if and when a company is actually registered and configured.

Lawful bases are not assigned automatically. The business owner must confirm the applicable basis for each purpose before this policy is treated as final.

Marketing is kept separate from the messages needed to provide your booking and service. You never have to accept marketing to create an account, book, or receive booking confirmations and security messages.

VSN CUTZ does not currently run email, SMS or WhatsApp marketing. If it is introduced, we will ask for a separate opt-in that is not pre-ticked, for example: “Send me VSN offers, updates and available appointments.”

Where consent is relied upon we record your marketing status, the channel, the timestamp, the source and any withdrawal date. You can withdraw at any time.

Some messages are necessary to provide the service you asked for, such as:

• Booking confirmations
• Cancellation confirmations
• Appointment updates
• Account and security information
• Credit transaction information
• Referral status where relevant

These are not marketing.

When someone uses another customer's referral code, we record the relationship between the referrer and the referred customer in order to validate the referral, track eligibility, issue rewards and prevent duplicate or fraudulent rewards.

We limit what customers can see about each other. A referrer is not shown the referred customer's email, phone number, address or booking details — only the minimum status needed, such as a first name and whether the referral has joined, booked or completed.

We may use relevant account and transaction information to detect duplicate reward claims, self-referrals, multiple accounts, abnormal reward activity and attempts to manipulate VSN Credit.

We use only proportionate information for this and do not carry out covert device fingerprinting.

We use service providers to run the website, the app and the customer account system. Our current provider categories are listed below and are being verified before publication.

We may also share information with professional advisers where necessary, and with legal or regulatory authorities where we are required to.

The VSN CUTZ customer application runs on third-party infrastructure. Before this policy is published as final, the following must be verified rather than assumed:

• Where customer data is actually hosted
• Which sub-processors the platform uses
• Which countries process the information
• Exact retention periods

Infrastructure details · Required before publication

Some providers may process personal information outside the UK. Where that happens, an appropriate safeguard must be in place. We do not claim that your data never leaves the UK, because that has not been verified.

We keep information only for as long as reasonably necessary for the purposes described here and for applicable legal obligations. Specific periods are shown once configured.

You can request deletion of your account from your VSN account settings or by contacting us.

Deleting an account does not always mean every record can be erased immediately. Some information may need to be kept, for example transaction and accounting records, fraud and security records, records relating to legal claims and other required business records.

Open your VSN account →

Under UK data protection law you may have rights concerning:

• Access to your information
• Correction of inaccurate information
• Erasure
• Restriction of processing
• Objection to processing
• Portability
• Withdrawing consent, where processing relies on consent
• Automated decision-making, where applicable

Which rights apply depends on the circumstances and the lawful basis for the processing.

To make a privacy request, contact us with your name, the email on your account, your mobile number, the type of request (access, correction, deletion, objection, withdrawing marketing consent, or another request) and any details you would like to add.

We may need to verify your identity proportionately before disclosing personal information.

Privacy contact: Privacy email · Required before publication · WhatsApp 07345 629420

Please raise any concern with us first so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk.

We use appropriate technical and organisational measures designed to protect personal information, including authentication, access controls, encrypted connections and role-based owner/customer permissions.

No system can be guaranteed completely secure, and we do not claim otherwise.

Passwords are handled by the authentication provider and are never shown to VSN CUTZ in plain text. Admin users cannot retrieve your password.

VSN CUTZ does not currently make decisions with legal or similarly significant effects solely by automated means. If automated fraud scoring or similar is introduced, this policy will be updated before it is deployed where required.

Each version of this policy records a version number, effective date and last-updated date, and earlier versions are retained. Material changes will be brought to your attention appropriately.

See also our Cookie Policy and Terms & Conditions.