Our Privacy Policy

How we collect information

We may collect information about you whenever you interact with us, for example when you:

Contact us to make, cancel or amend an appointment via email, phone or in person
Attend an appointment
Post content to our website/social media sites (including Facebook)

We may also receive information about you from third parties – but only if you’ve given them permission to share your information.

Where we collect information from

We may collect information in the following ways:

When you give us information directly: You may provide your details to us when you request specific information or make an appointment.
When you have given other people permission to share it: You may have provided your details to a friend who has offered to make an appointment on your behalf.
Social media: Depending on your settings or the privacy policies for social media and messaging services like Facebook and Twitter, you might give us permission to access information from those accounts or services.
When we collect information when you are using our website: Upon visiting our website, information about your visit is recorded and stored. See our cookie policy for more details.

What categories of personal information we collect

The type and quantity of information we collect and how we use it depends on why you are providing it.

Your name (including former last names if appropriate)
Your contact details (full address, email address and phone number)
Your date of birth
Medical History
Where it is appropriate, we may ask about the sorts of information you wish to receive.

How we will use your personal information

We will use your personal information in a number of ways, including for the following purposes:

To provide you with the information you have requested
To update you about any changes to our services
To maintain our organisational records and ensure we have your most up-to-date communication preferences
To help us improve our services, campaigns or information-offering

How we keep your data safe and who has access to it

We place great importance on the security of your personal information and will always try to take appropriate precautions to protect it.

We ensure that there are appropriate technical controls in place to protect your personal details.

We always ensure only authorised personnel have access to your information, and that they are appropriately trained to manage your data.

Despite all of our precautions, no data transmission can be guaranteed to be 100% secure. So, while we strive to protect your personal information, we cannot guarantee the security of any information you disclose to us online, and you must understand that you do so at your own risk. However, any payment card details (such as credit or debit cards) we receive through our website are passed securely to our payment processing providers who meet the required Payment Card Industry (PCI) Security Standards.

Who we share your personal data with

We do use external organisations that collect and/or process personal data on our behalf, for example Apple in that we use Apple programs in the iCloud. Before working with these companies we perform rigorous checks to ensure they meet all relevant regulations and legislation. We always implement a contract with our suppliers, which imposes robust data protection requirements, including the provisions of this policy, and seeks to provide maximum protection of your personal details.

We may legally be required to disclose your details if required to by the police or for regulatory reasons. We will only ever share your data in other circumstances if we have your consent to do so.

How we keep your information up to date

We rely on you to let us know if your contact details or medical history change.

How long we keep your information for

We will hold your personal information on our systems for as long as is necessary for the relevant activity, for example we will keep a record of any donations you have made for at least six years.

If you ask us to stop sending you communications, we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us.

Our legal basis for processing your information

Although in many cases we will seek consent to process your personal data, in some instances we may process your information without consent when we are legally allowed to do so. This will only be where it is in our legitimate interests to do so and where we are confident that such processing is not likely to prejudice your legitimate interests or rights and freedoms.

Where we are processing your personal data on the basis of consent that you have given us, you are entitled to withdraw that consent at any time such that we can no longer rely on it as a basis for continuing to process your personal information.

We may legally be obliged to share data in accordance with relevant legislation and potential law enforcement requirements.

Your rights

You retain control of how we use your data and you have the right to ask us to stop processing your personal information, which we will do. In some circumstances, we may legally be required to retain your personal information for audit purposes. However, this will be discussed with you depending on your requirements.

You also have the right to request a copy of the information we hold about you. If you want to access your information, please contact the salon.

Under the General Data Protection Regulation, which is expected to become law in the UK in May 2018, you are also granted a number of additional rights. These include:

The right to rectification
The right to erasure
The right to data portability
The right to object
Rights in relation to automated decision making and profiling

For more information on these rights please read the relevant guidance issued by the ICO at https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/individuals-rights/

If you would like to make a complaint about how we process your personal data, please contact the salon.

If you are not happy with how your complaint is dealt with, you should contact the Information Commissioner’s Office. Alternatively, you are entitled to make a complaint to the Information Commissioner’s Office without first referring your complaint to us.

For further information please see the Information Commissioner’s guidance.

Changes to this privacy policy

This policy may change from time to time. If we make any significant changes to this policy, we will publicise these changes clearly on our website or contact you directly with more information.

Please note that this privacy policy will be updated to reflect the requirements of the General Data Protection Regulation, which is expected to become law in the UK on 25 May 2018.

Please do revisit this policy each time you consider giving your personal information to us.

Hands N FeetDunn