Privacy Policy

1. Introduction

Crowning Glory Hairdressing ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our booking services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when:

• Making a booking through our website
• Contacting us via email or phone
• Subscribing to our marketing communications
• Leaving a review or feedback

This information may include:

• Name
• Email address
• Phone number
• Booking preferences (date, time, service)
• Payment method preferences
• Marketing communication preferences

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Date and time of access

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To process and manage your bookings, send booking confirmations, and communicate about your appointments
• Customer Service: To respond to your inquiries, provide support, and handle complaints
• Legal Compliance: To comply with legal obligations and protect our legal rights
• Marketing: With your consent, to send you promotional materials, special offers, and updates about our services
• Analytics: To analyse website usage, improve our services, and enhance user experience
• Business Operations: To manage our business operations, maintain records, and generate reports

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

• Contract: Processing necessary to perform a contract with you (e.g., booking services)
• Legal Obligation: Processing required to comply with legal obligations
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., website analytics, fraud prevention)
• Consent: Processing based on your explicit consent (e.g., marketing communications)

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting our business (e.g., hosting providers, payment processors)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, property, or safety, or that of our customers or others

All third parties are contractually obligated to protect your information and use it only for the purposes we specify.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Staff training on data protection
• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Booking Records: Retained for 7 years for accounting and tax purposes
• Marketing Data: Retained until you withdraw consent or opt-out
• Website Analytics: Retained for up to 2 years
• Customer Service Records: Retained for 3 years

After the retention period expires, we will securely delete or anonymise your personal information.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information (subject to legal obligations)
• Right to Restrict Processing: Request restriction of how we process your information
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided in Section 11.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your preferences and activity on our website. For detailed information about our use of cookies, please see our Cookie Policy.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the UK/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office
• Adequacy decisions by the UK government
• Other legally recognised transfer mechanisms

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email notification (for significant changes)

Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.

13. Complaints

If you are not satisfied with how we handle your personal information or respond to your requests, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):