Privacy Policy

1. Data controller

The data controller responsible for your personal data is Reveal Hair & Beauty, 36 Mallard Way, Bradwell, Great Yarmouth, Norfolk NR31 8LX, United Kingdom. You can contact us about privacy at hello@revealhairandbeauty.co.uk or 01493 650 706.

2. What information we collect

We may collect and use the following types of information:

• Identity and contact details — for example your name, phone number, email address and postal address when you book, enquire or visit.
• Appointment and service information — details needed to provide hair and beauty services, including preferences, consultation notes and health-related information you choose to share so we can treat you safely.
• Payment information — we do not store full card details on our own systems; card payments are handled by our payment provider according to their privacy policy.
• Website and technical data — such as IP address, browser type, and cookies or similar technologies when you use our site (see our Cookie Policy).
• Communications — records of emails, calls or messages you send us.

3. How we use your information

We use personal data for purposes including:

• Booking, confirming and managing appointments.
• Providing hair and beauty services safely and in line with professional standards.
• Responding to enquiries and complaints.
• Operating and improving our website and salon experience.
• Legal and regulatory obligations (for example, accounting, tax, health and safety, or insurance).
• Sending marketing communications where you have opted in, or where the law allows (you can opt out at any time).

We rely on appropriate lawful bases under UK GDPR, such as performing our contract with you, legitimate interests (running our business and keeping clients and staff safe), legal obligation, and consent where required (for example, for certain marketing or non-essential cookies).

4. Sharing your information

We do not sell your personal data. We may share it with trusted service providers who help us run the business — for example IT hosting, email delivery, appointment or payment systems — only as needed for those services and under appropriate safeguards. Where you have consented in our cookie banner, website usage data may be processed by Google (Google Tag Manager / Analytics) and Meta (Facebook Pixel and related technologies) as described in our Cookie Policy. We may also disclose information if required by law or to protect our rights, clients or staff.

5. International transfers

Where we use providers based outside the UK, we ensure appropriate protections are in place (such as UK adequacy decisions or standard contractual clauses) in line with UK data protection law.

6. How long we keep data

We keep personal data only for as long as needed for the purposes above, including legal, accounting and insurance requirements. Health-related notes may be retained in line with professional and regulatory guidance. When data is no longer needed, we delete or anonymise it securely.

7. Your rights

Under UK data protection law you may have the right to:

• Access a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request erasure, restriction of processing, or object to certain processing.
• Data portability, where applicable.
• Withdraw consent where we rely on consent (without affecting earlier lawful processing).
• Lodge a complaint with the Information Commissioner's Office (ICO) — see below.

To exercise your rights, contact us using the details above. We may need to verify your identity before responding.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and care when sharing information by email.

9. Children

Our services are not directed at children without parental involvement. If you are booking for a minor, the parent or guardian is responsible for providing accurate information and consent where needed.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will change when we do. We encourage you to review this page periodically.

11. Complaints

If you have concerns about how we use your data, please contact us first. You also have the right to complain to the ICO: ico.org.uk/make-a-complaint.

12. Related policies

Our Terms & Conditions apply when you use our services. Our Cookie Policy describes cookies and similar technologies on this website.