Legal
Privacy Policy
Last updated: September 2026 · UK GDPR Compliant
1. Who We Are
Deville's Den is operated by Adonis Nistiri, a sole trader based in Burton-on-Trent, Staffordshire, UK. This privacy policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data We Collect
We collect and process the following categories of personal data: • Identity data — your name or display name, date of birth (confirmed once when your client profile is created, for age verification 20–100), and pronouns (if provided) • Contact data — email address, phone number, and preferred contact method • Booking data — service tier, preferred date and time, body oil preference, and any voucher code applied • Preference data — preferred body oil, session preferences, health notes, and special requests • Account data — login credentials and profile settings if you create an account • Communication data — messages sent via the contact form or messaging platforms If you choose to pay online, your payment is handled entirely by Stripe — Deville's Den never sees or stores your card details. Sessions settled in cash leave no payment information with us either.
3. How We Use Your Data
Your personal data is used solely to: • Process, confirm, and manage your session bookings • Administer voucher codes and their redemption limits • Communicate with you regarding your appointments • Personalise your experience based on your stated preferences • Maintain accurate records of completed sessions • Comply with legal obligations We will never sell, rent, or share your data with third parties for marketing or commercial purposes.
4. Legal Basis for Processing
We process your data under the following lawful bases as defined by UK GDPR: • Contract — to fulfil the agreement when you book a session • Legitimate Interests — to manage our service, maintain records, and communicate with clients • Consent — where you have explicitly opted in, such as marketing communications or the saving of optional profile preferences • Legal Obligation — to retain certain records as required by law
5. Data Retention
We retain your personal data for up to 2 years following your last booking or account activity. After this period, data is securely and permanently deleted. You may request earlier deletion at any time (see Section 7). Booking records may be retained in anonymised form for operational purposes.
6. Your Rights
Under UK GDPR, you have the right to: • Access a copy of the personal data we hold about you • Correct any inaccurate or incomplete data • Request erasure of your personal data ('right to be forgotten') • Restrict or object to how your data is processed • Withdraw consent at any time, where processing is based on consent • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk To exercise any of these rights, contact Adonis directly or use the Privacy tab in your client profile.
7. Data Deletion Requests
You may request deletion of all personal data associated with your account at any time. To do so, log in to your client profile and use the Privacy tab, or contact Adonis directly. Deletion requests will be processed within 30 days. Please note that deleting your account will also permanently remove your booking history and saved preferences.
8. Third Parties
Your data is not sold or shared with third parties. The website is hosted on secure cloud infrastructure (Base44). Payments made online are processed by Stripe under their own privacy policy; no card details ever reach Deville's Den. Messaging platforms (WhatsApp, Telegram) used for communication are governed by their respective privacy policies.
9. Security
All personal data is stored on secure, encrypted infrastructure with access restricted to Adonis Nistiri only. The incall address is never displayed publicly and is shared only upon booking confirmation. Session preferences and health notes are treated with the highest level of confidentiality.
10. Cookies
This website uses only the minimum necessary cookies required for functionality — including storing your cookie consent preference and maintaining your login session. No advertising, analytics, or tracking cookies are used. See our Cookie Policy for full details.
11. Contact & Complaints
For any questions, requests, or concerns regarding this privacy policy or your personal data, please contact Adonis directly via the contact page or by email. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113.