Privacy Statement (UK)

Last updated: 7 December 2025

1. Introduction

This Privacy Policy explains how Braids and Beyond (“we”, “us”, “our”) collects, uses, and protects your personal data in compliance with the UK General Data Protection Regulation (UK GDPR).

By using our Website or services, you agree to the practices described in this Policy.

2. Data Controller

Braids and Beyond
Email: info@braidsandbeyond.co.uk
Website: www.braidsandbeyond.co.uk
Tel: +44 7533 952708

3. What Personal Data We Collect

We may collect the following information:

3.1 Information you provide to us

  • Name

  • Contact details (email, phone number)

  • Appointment details

  • Payment information

  • Medical or allergy information relevant to hair treatments

  • Messages you send via our contact forms or email

3.2 Information collected automatically

  • IP address

  • Browser type

  • Device information

  • Cookies and usage data

4. How We Use Your Data

We use your personal data for the following purposes:

  • Managing appointments and providing services

  • Responding to enquiries

  • Processing payments

  • Improving our Website and services

  • Marketing communications (only with your consent)

  • Compliance with legal obligations

5. Legal Basis for Processing

We rely on the following legal grounds:

  • Contractual necessity: To provide appointments and services

  • Consent: For marketing communications

  • Legitimate interests: Improving our services and ensuring Website security

  • Legal obligation: Tax, accounting, and regulatory requirements

6. Data Sharing

We do not sell your personal data.
We may share your data only with:

  • Service providers (e.g., booking systems, payment processors)

  • Legal or regulatory authorities when required

  • Professional advisers (e.g., accountants)

All third-party processors are GDPR-compliant.

7. Data Retention

We store personal data only for as long as necessary:

  • Appointment and contact data: up to 6 years

  • Financial records: as required by law

  • Marketing data: until you withdraw consent

You may request deletion of your data at any time.

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Data portability

  • Object to processing

  • Withdraw consent at any time

To exercise your rights, email: info@braidsandbeyond.co.uk

9. Data Security

We use appropriate technical and organisational measures to protect your personal data, including encrypted storage, secure servers, and access controls.

10. Children’s Privacy

We do not knowingly collect personal data from individuals under 16 without parental consent.

11. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on our Website.

Scroll to Top