This privacy notice explains how SaVa Hair Studio collects, uses, stores, and protects your personal data when you book appointments, visit our salon, fill in consultation forms, buy from our online shop, or contact us. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
SaVa Hair Studio, 14 Exchange Street, Attleborough, Norfolk, NR17 2AB.
Phone: 07356 036726 · Email: savahairstudio@gmail.com
We are the data controller for your personal data. As a small business, we do not have a Data Protection Officer.
What Personal Data We Collect
- Personal information: name, address, phone number, email address, date of birth.
- Appointment details: booking times, services requested, stylist preferences.
- Sensitive health data: allergies, skin/hair conditions, previous reactions, patch test results — necessary for your safety.
- Online orders: the items you buy, your delivery address (for delivery orders), and records of your order and payment.
- eGift cards: the recipient’s name and email address and your message, used only to send them their card.
- Payment information: processed securely by our payment provider, Square; we never see or store your full card details.
- Marketing preferences: if you opt in for newsletters or promotions.
Why We Collect and Use Your Data
- To provide our services — contractual necessity (booking, treatments).
- To process online orders — contractual necessity (taking payment, delivery or Click & Collect, order and eGift card emails, returns and refunds).
- For your safety — recording allergies to avoid reactions.
- Legal obligations — health & safety compliance, and keeping sales records for tax.
- Legitimate interests — appointment reminders and basic record-keeping.
- Marketing — only with your explicit consent; you can withdraw at any time.
We do not sell your data.
Who We Share Your Data With
We may share limited data with trusted suppliers, professional advisors (accountants, insurers) where necessary, and legal authorities if required by law. Our suppliers include:
- Square — appointment booking, payments, online orders and gift cards.
- Google (Gmail) — sending order confirmations and eGift cards by email.
- Netlify — hosting our website and online shop.
- Our delivery service — your name and delivery address, for delivery orders only.
All third parties are required to keep your data secure. Some of these providers may process data outside the UK; where they do, they use safeguards approved under UK data protection law.
How Long We Keep Your Data
- Client records: 6 years after your last visit.
- Allergy/health records: while you are a client, plus 6 years after last visit.
- Online order records: 6 years, for tax and accounting.
- Marketing data: until you withdraw consent.
Your Rights
Under UK GDPR, you have the right to access, correct, or delete your data; restrict or object to processing; and withdraw consent at any time. Contact us to exercise any right — we will respond within one month, free of charge in most cases.
If you are unhappy with our response, you can complain to the Information Commissioner's Office (ICO) at www.ico.org.uk or call 0303 123 1113.
Security
We take reasonable steps to protect your data, including secure salon software, locked storage for paper records, password protection, and staff training on data protection.
Cookies & Website
If you visit our website, we may use cookies for functionality and analytics purposes. Our online shop keeps your basket in your browser’s storage so it’s still there when you come back; it isn’t sent to us until you check out.