Privacy Policy

1. Who we are

Park Row Hair & Beauty Ltd ("we", "us", "our") is the controller of any personal information you share with us. We are a company registered in England and Wales (company number 07795305) at 20 Bradford Road, Brighouse, West Yorkshire, HD6 1RW.

We take our responsibility for your personal information seriously. This privacy notice explains what information we collect, why we collect it, how we use it, who we share it with, and what rights you have over it. It applies to the personal information of our clients, prospective clients, job applicants, suppliers, and visitors to our website.

If you have any questions, please contact Janet Brunskill on 01484 722220 or at park-row@hotmail.com.

2. The information we collect about you

We collect personal information when you:

• Book or enquire about an appointment, online, by phone, or in person
• Visit the salon for a service or treatment
• Buy a product from us
• Apply for a job with us
• Get in touch through our website contact form, by email, by phone, or on social media
• Sign up to receive marketing from us

The information we collect may include:

• Contact details: name, address, phone number, email address
• Appointment information: services or treatments requested, appointment dates, stylist preferences
• Health information relevant to your treatment: allergies, skin sensitivities, medical conditions, pregnancy, medication that might affect treatment outcomes
• Payment and transaction information: amount paid, date, method of payment (we don't store full card details; these are handled by our payment provider)
• Online information: IP address, browser type, pages visited (see our Cookie Policy for more on what's collected automatically)
• Job applicant information: CV, employment history, references, right-to-work documentation
• Marketing preferences: whether you've opted in or out of marketing communications

3. How we use your information and our lawful basis

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we can only use your personal information if we have a lawful basis to do so. Here are the lawful bases we rely on.

To perform our contract with you

We use your information to provide the services you've booked, contact you about appointments, take payment, and respond to enquiries.

For our legitimate interests

We use your information to run the salon as a business, keep records of services provided for safety and quality reasons, improve our website and the services we offer, prevent fraud, and protect our staff, clients, and premises. Where we rely on legitimate interests, we've made sure these don't override your rights and interests.

With your consent

We always ask for your explicit consent before:

• Holding or using health and medical information about you
• Sending you marketing communications
• Using any photos or videos of you for marketing
• Holding or using personal information about anyone under 16 (we'll need consent from a parent, carer, or guardian)

You can withdraw consent at any time by contacting us (see section 12).

To comply with our legal obligations

We're required by law to keep certain records, for example financial records for HMRC, employment records, and health and safety records.

4. Who we share your information with

We don't sell your information to anyone. We share it only where we need to, and only with organisations who have appropriate data protection safeguards in place. This may include:

• Our salon software and booking system provider, which holds your appointment history and contact details
• Our payment provider, which processes payments
• Our accountants and HMRC, for financial and tax reporting
• Our website provider (Customology), for managing the website infrastructure
• Our email marketing platform, if you've opted in to receive marketing
• Other suppliers of products and services we use to run the salon
• Professional advisors such as legal or insurance, where necessary
• Law enforcement, regulators, or other authorities, where we're required by law to share information, or where it's needed to prevent fraud

If we ever need to transfer your information outside the UK (for example, if a supplier hosts data in the EU or elsewhere), we'll make sure the transfer is protected by an appropriate safeguard, such as an adequacy decision or standard contractual clauses.

5. How long we keep your information

We don't keep your information for any longer than we need to. The table below sets out our retention periods.

After these periods, the information is securely deleted or destroyed. Electronic files are permanently deleted from our salon software, email, and other systems. Paper records are securely shredded.

6. Where your information is stored and how we protect it

We store your information securely on:

• Our salon software system, which is backed up daily
• Secure electronic files accessed only by authorised members of the team
• Paper records, kept in a locked cabinet or secure archive storage

Our salon software provider stores data within the UK or in territories the UK considers to have adequate data protection. Payment transactions are encrypted.

We do everything we reasonably can to protect your information, but no method of transmission over the internet is completely secure. If you have concerns, please contact us.

7. Your rights

Under the UK GDPR, you have the following rights:

• The right to be informed about how we use your information (this notice fulfils that)
• The right of access to a copy of the personal information we hold about you
• The right to rectification, if any information we hold is incorrect or incomplete
• The right to erasure (often called the "right to be forgotten"), where there's no good reason for us to keep your information
• The right to restrict processing, where you have a particular concern about how we're using your information
• The right to data portability, to receive a copy of your data in a portable format
• The right to object to us using your information for direct marketing, or in some cases for our legitimate interests
• The right not to be subject to automated decision-making, including profiling. We don't make automated decisions about you that have legal or similarly significant effects.
• The right to withdraw consent, where we're relying on consent to use your information

Requests are usually free of charge and we'll respond within one calendar month. To exercise any of these rights, contact us at park-row@hotmail.com or by post to the address in section 12.

If you're not happy with how we've handled your information or a request, you can complain to the Information Commissioner's Office at ico.org.uk/concerns, although we'd appreciate the chance to put things right first.

8. Marketing

We'd love to send you information about offers, events, and new services you might be interested in, but only if you've told us that's OK. We may send marketing by email, text message, or post.

You can opt out at any time by:

• Clicking the unsubscribe link in any marketing email
• Replying STOP to a marketing text message
• Calling us on 01484 722220
• Emailing park-row@hotmail.com

Opting out of marketing won't affect any appointment confirmations, reminders, or other essential service messages we need to send you.

9. Children's data

We will only hold and use personal information about anyone under 16 with the consent of a parent, carer, or guardian. For appointments booked for children, the booking adult is responsible for providing consent.

10. Cookies and other tracking

Our website uses cookies and similar technologies to make the site work and to help us understand how people use it. For full details, please see our Cookie Policy.

11. Changes to this notice

We may update this privacy notice from time to time, for example if the law changes or if we change how we run the salon. The "Last updated" date at the top of this page tells you when we last reviewed it.

12. How to contact us

If you have any questions about this notice, want to access your data, or wish to exercise any of your rights, please contact:

Janet Brunskill Park Row Hair & Beauty Ltd 20 Bradford Road Brighouse West Yorkshire HD6 1RW

Phone: 01484 722220 Email: park-row@hotmail.com

You also have the right to complain to the Information Commissioner's Office. You can find out how on their website: ico.org.uk/concerns.