Privacy Policy

What we collect

• Booking details — name, email, phone number and appointment details, whether you book online, by phone or in the salon, plus any notes about the appointment. Please don’t put illnesses or medication in notes.
• Patch tests — before some colour services we may record the result and date of a patch test. This is health information, so we only record it with your explicit consent (see below).
• Order details — name, email, phone number and order details when you buy gift vouchers or products through our shop.
• Enquiry and waiting-list details — name, email, phone number and your message when you use our contact form or join a waiting list.
• Customer account details — name, email, phone number, a securely scrambled (hashed) password and your loyalty points, if you create an account.
• Marketing choices — whether you’ve agreed to hear from us, and when.
• Payment information — handled entirely by Stripe, our payment processor. We never see or store your full card details ourselves.
• Basic site statistics — page views and general visit information (such as which page you came from and your country) through a privacy-friendly script that sets no cookies. To count visits without tracking you, it creates a visitor code that changes every day, made from your internet address and browser type using a one-way scramble; your actual internet address is not stored.

Why we use it, and our legal basis

• To take and manage your booking or order and send confirmations and reminders — because we need to in order to provide what you’ve asked for (contract).
• To respond to your enquiry — our legitimate interest in answering the people who contact us.
• To keep records for tax and accounting — a legal obligation.
• To run, secure and improve this website and keep our records safe — our legitimate interests.
• To send you news and offers — only if you’ve opted in (consent). You can withdraw it at any time using the unsubscribe link in any email.
• To record a patch test — your explicit consent, so that we can check a colour service is safe for you. You can withdraw consent and ask us to delete the record at any time.

We don’t sell your data, and we don’t use it for anything beyond running the salon and this site.

Age

We don’t ask for your age or date of birth. Our online booking is intended for adults.

Patch tests and health information

Patch-test results are kept separately from ordinary notes, and are visible only to the salon owner and managers, and to stylists who are looking after you. We record only the result and the date, and only with your explicit consent.

Who we share it with

• Omnexa Opic Limited (company no. 17362151) — the company that builds and runs our website and booking system for us. It acts on our instructions as our “data processor”. Contact-form messages, site statistics and system backup reports pass through its systems.
• Stripe — to process payments securely. See Stripe’s own privacy policy for how they handle payment data.
• Cloudflare — our hosting and security provider, and the infrastructure our booking system and database run on.
• Resend — used to send booking confirmations, reminders and (with your consent) marketing emails.
• Google — we receive booking and enquiry notifications in a Gmail inbox, and this site links to Google for maps and reviews.

We don’t share your data with anyone else, and never for marketing purposes without your consent. Some of these providers handle data outside the UK; where they do, they rely on the safeguards UK data protection law requires.

How long we keep it

• Booking and order records are kept for up to 6 years for tax and accounting. If you ask us to delete your data, we remove your name, contact details and notes from them and keep only the financial record.
• Customer accounts, enquiries, waiting-list entries and patch-test records are deleted when you ask us to, and we don’t keep them longer than we need them.
• When we delete your data, copies may remain in our daily backups for up to 90 days before they’re automatically removed. We don’t restore deleted data from backups except to recover from a system failure.

Cookies and local storage

This site uses essential technical storage only for customers — for example, remembering what’s in your shop basket on your own device. Our site statistics use no cookies. If you sign in as staff, a secure login cookie keeps you signed in. Stripe sets its own cookies on its payment pages, outside our control.

Your rights

Under UK GDPR you have the right to see the personal data we hold about you and get a copy, to have it corrected or deleted, to restrict or object to how it’s used, to withdraw consent at any time, and to move your data to another provider where it applies. To use any of these rights, contact us at bitahairstudio@gmail.com. We’ll reply within one month. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you have concerns about how your data is handled.

Contact us

Questions about this policy or your data? Email bitahairstudio@gmail.com or call 0780 780 5432.