Style Beyond
Expectation

How we use your personal information

(UK GDPR compliant – January 2026) This privacy notice explains how SaVa Hair Studio collects, uses, stores, and protects your personal data when you book appointments, visit our salon, fill in consultation forms, or contact us. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

SSaVa Hair Studio 14 Exchange Street, Attleborough, Norfolk, NR17 2AB Phone: 07356 036726 Email: savahairstudio@gmail.com We are the data controller for the personal data we process about you. We do not have a Data Protection Officer as we are a small business. What personal data we collect

What Information We Collect

Personal information: Your name, address, phone number, email address, and date of birth (for age-appropriate services). Employment records relating to performance, health, absence, holiday. Appointment details: Booking times, services requested, stylist preferences. Sensitive health data (special category data): Allergies, skin/hair conditions, previous reactions to products/treatments, patch test results (this is necessary for your safety and to provide safe services). Payment information: Card details (processed securely by our payment provider; we do not store full card details). Marketing preferences: If you opt in for newsletters, offers, or promotions. We collect this data directly from you (e.g., during booking, consultation forms, or in-salon conversations). Why we collect and use your data (lawful basis) We process your data for the following reasons: To provide our services – Contractual necessity (e.g., booking appointments, performing treatments). For your safety – Explicit consent or to protect vital interests (e.g., recording allergies to avoid reactions). Legal obligations – To comply with health & safety laws. Legitimate interests – Running our business efficiently (e.g., reminders, basic record-keeping). Marketing – Only with your explicit consent (e.g., emails about offers; you can withdraw consent anytime). We will only use your data for these purposes or compatible ones. We do not sell your data.