Privacy policy

Who we are

Ramlak Beauty Palace, Saltdean, is responsible for your personal information (the “data controller”). If you have any questions about this policy or your information, email us at ramlakhairs@gmail.com. TODO: add the ICO registration number once the data protection fee is paid (ico.org.uk/fee).

What we collect

• Your contact details: name, email address and phone number.
• Your appointment: the service, date and time, prices, deposit and any final price on the day.
• Your preferences: the complimentary drink and snack you choose, and whether you prefer a chat or quiet time. These are optional.
• Your note: anything you choose to tell us when you book. This is optional.
• Payment confirmation: Stripe tells us whether your deposit was paid, and gives us a payment reference. We never see or store your full card details.

If you agree, we may also take photos or video of your finished hairstyle. See Photos and video below.

We do not ask for health information. Please do not include allergy or medical details in your booking note; tell us in person when you arrive instead.

Why we use it

• To take and manage your booking, including taking your deposit, sending your confirmation email and contacting you about your appointment. We need this to provide the service you asked for (performance of a contract).
• To remember your preferences for next time. When you book again with the same email address, we fill in your last drink, snack and visit choices so you do not have to. This is in our legitimate interests in giving you a better visit, and you can change them every time.
• To keep business and tax records, as the law requires (legal obligation).

We do not use your information for marketing, and we never sell it.

Photos and video

What we capture. Photos of finished hairstyles from the front, back and each side, and short videos of the finished style that we post on our TikTok or Instagram account. These may show the person’s face, so they are personal information. We only use a photo or video when the person shown has given us permission, and we record that permission before it goes on the website. We always ask before photographing or filming you, and saying no will not affect your appointment.

Where it is shown. On the page for each service on this website, and as the picture on that service’s card on our home and services pages. Photos are stored by Vercel, which hosts our website. Videos stay on TikTok or Instagram and are shown on our website from there.

Videos from TikTok and Instagram. Nothing loads from TikTok or Instagram when you open a service page. Only when you tap “Watch the finished style” does the video play from TikTok or Instagram, inside our page. At that point those services may set cookies and collect information about your device and how you watch, under their own privacy policies: TikTok and Instagram. If you would rather they didn’t, don’t tap the button.

Changing your mind. You can withdraw your permission at any time by emailing ramlakhairs@gmail.com and telling us which photo or video it is. We will take it off our website and delete the photo from our storage within TODO: confirm a period, e.g. 7 days, and remove the video from our TikTok or Instagram account. Withdrawing doesn’t affect how we used it before you asked. We rely on your consent for photos and video.

Who we share it with

We use trusted companies to run our website and bookings. They only use your information on our instructions:

• Stripe, to take card payments.
• Vercel, which hosts our website and stores service photos.
• Neon, which stores our booking database.
• Resend, which sends our booking emails.
• TikTok and Instagram, where the videos of finished styles are posted, if you have agreed to be filmed.

Some of these companies may process information outside the UK. Where they do, they use safeguards approved under UK law, such as the UK International Data Transfer Addendum. TODO: confirm the hosting and database regions, and that each provider has a data processing agreement in place.

How long we keep it

• Booking and payment records: 6 years after the end of the tax year, for tax purposes. TODO: confirm with your accountant.
• Your contact details and preferences: TODO: choose a period, e.g. 2 years after your last appointment, after which we delete them.

Cookies

We do not use analytics or advertising cookies. Our website uses a small number of strictly necessary cookies for security and for the owner’s sign-in. When you pay, Stripe’s checkout page uses cookies to prevent fraud. Strictly necessary cookies do not need your consent. If you tap “Watch the finished style”, TikTok or Instagram may set their own cookies; see Photos and video. TODO: if analytics are added later, add a cookie banner and update this section.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you
• ask us to correct information that is wrong
• ask us to delete your information
• object to, or ask us to limit, how we use your information
• ask for your information in a format you can take elsewhere

To make a request, email ramlakhairs@gmail.com. We will reply within one month. There is usually no charge.

Complaints

If you are unhappy with how we have used your information, please contact us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.

See also our booking and cancellation terms.