1. Introduction
Welcome to InHaus Beauty Salon. We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws. This privacy policy informs you how we handle your personal data when you visit our website, book an appointment, or visit our salon, and tells you about your privacy rights.
2. Data Controller
InHaus Beauty Salon is the controller and responsible for your personal data. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us using the details provided on our website.
3. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you to provide our services efficiently:
- Identity Data: first name, last name, title.
- Contact Data: billing address, email address, and telephone numbers.
- Health Data (Special Category Data): information relating to allergies, skin conditions, or medical history necessary for us to safely perform beauty treatments. We only collect this with your explicit consent.
- Transaction Data: details about payments and services you have purchased from us.
- Technical & Usage Data: IP address, browser type, and information about how you use our website.
4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Our lawful bases for processing your data include:
- Performance of a Contract: to process and manage your appointment bookings and payments.
- Explicit Consent: to process health-related data required for treatment safety, and to send you marketing communications (which you can opt out of at any time).
- Legitimate Interests: to improve our services, website functionality, and customer experience.
- Legal Obligation: to comply with applicable tax and regulatory requirements.
5. Data Retention & Security
We have put in place robust security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed in an unauthorised way. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (typically up to 7 years for tax purposes).
6. Your Legal Rights
Under applicable data protection laws, you have rights in relation to your personal data, including the right to:
- Request access to your personal data (a "data subject access request").
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data where there is no good reason for us continuing to process it.
- Object to processing of your personal data where we are relying on a legitimate interest.
- Request restriction of processing of your personal data.
- Request the transfer of your personal data to you or a third party.
- Withdraw consent at any time where we are relying on consent to process your personal data.
7. Complaints
You have the right to make a complaint at any time to the relevant supervisory authority for data protection issues in your jurisdiction. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.