Privacy Policy

1. Who We Are

We are a beauty and wellness salon committed to protecting your privacy and ensuring your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

2. Information We Collect

2.1 Information You Provide

• Contact Information: Name, email address, phone number
• Booking Information: Service preferences, appointment dates and times
• Account Information: Username, password (encrypted), profile preferences
• Communication: Messages sent through our contact forms or email

2.2 Information We Collect Automatically

• Website Usage: Pages visited, time spent, click patterns (via Google Analytics)
• Device Information: Browser type, operating system, IP address
• Cookies: See our Cookie Policy section below

2.3 Third-Party Information

• Fresha Bookings: Booking and customer data from our booking platform
• Social Media: Public information if you interact with our social media accounts

3. How We Use Your Information

3.1 Service Provision

• Processing and managing your bookings
• Providing customer support and responding to inquiries
• Sending booking confirmations and reminders
• Managing your account and preferences

3.2 Business Operations

• Improving our website and services
• Analyzing website usage and customer behavior
• Preventing fraud and ensuring security
• Complying with legal obligations

3.3 Marketing (With Your Consent)

• Sending promotional emails about our services
• Personalizing your website experience
• Showing relevant advertisements
• Measuring advertising effectiveness

4. Legal Basis for Processing

5. Cookie Policy

We use cookies to enhance your browsing experience and analyze our website traffic. You can control cookie preferences through our cookie consent banner.

5.1 Types of Cookies We Use

6. How We Share Your Information

We do not sell your personal data. We may share information with:

6.1 Service Providers

• Fresha: Booking platform for appointment management
• Google: Analytics and advertising services (with your consent)
• Email providers: For sending communications
• Hosting providers: For website and data storage

6.2 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

7. Data Security

We implement appropriate security measures to protect your personal data:

• Encryption: Data transmitted over HTTPS
• Access Controls: Limited access to personal data
• Regular Updates: Security patches and monitoring
• Data Minimization: We only collect necessary information

8. Data Retention

9. Your Rights

Under GDPR, you have the following rights:

10. International Data Transfers

Some of our service providers may be located outside the UK/EU. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Google (US): Certified under EU-US Data Privacy Framework
• Other providers: Standard Contractual Clauses or adequacy decisions

11. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date
• Sending email notifications for material changes

13. Contact Us