Personal data
Privacy policy
This page is not ready to be published yet.
Only one thing is still missing: the owner's full name and legal form. Without it the
document does not meet the UK GDPR requirement, because it does not say who is formally
responsible for the data. The address and contact details are now filled in and the rest
of the document is complete. The page is set to noindex, so it will not
appear in search results until it is finished.
Who processes your data
The data controller is [TO BE COMPLETED: owner's full name and legal form — sole trader, or Ltd company with its number], trading as Glow Hair Studio, 22 Whitley Crescent, Bicester OX26 4XR, United Kingdom. Contact about data: [email protected].
The salon operates in England, so this processing is governed by the UK GDPR and the Data Protection Act 2018.
What is collected
Only what you type into one of the two forms on this site.
Booking request: your name, phone number, optionally e-mail address, the service chosen, proposed dates and time of day, and your message.
Hair condition questionnaire: your name, phone number, colouring and treatment history, a description of your hair and scalp, information about allergies and reactions to cosmetics, and the result you are hoping for.
Information about allergies and scalp condition relates to health, so it is treated with particular care. You provide it voluntarily and it is used solely to choose products safely and plan the appointment.
Why, and on what basis
The data is used only to contact you, agree a time and prepare the service. The basis is your consent, given by ticking the box when you send the form, and the performance of the service you are asking for.
Information about allergies and scalp condition is special category data — health data. I process it only on the basis of your explicit consent. You do not have to provide it: the questionnaire is voluntary, and I will book you in without it, though before a first colour appointment I will ask about allergies in person.
It is not used for advertising, there is no profiling and no automated decision-making.
Who it is shared with
The form does not save anything to a database. The content of your request is sent as an e-mail to the salon's inbox through the mail provider Resend (Plus Five Five, Inc., United States) and the hosting provider Vercel Inc. (United States), who process it solely in order to deliver the message.
Both providers are based outside the United Kingdom, so your data is transferred to the United States. The transfer relies on standard contractual clauses together with the UK International Data Transfer Addendum, which both providers apply in their processing agreements.
Your data is never sold or shared with anyone else.
How long it is kept
Messages are kept for 12 months from the last contact and then deleted. You can ask for deletion sooner.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. You can withdraw consent at any time — this does not affect processing that already took place. An e-mail to the address above is enough.
If you believe your data is being handled unlawfully, you may lodge a complaint with the UK supervisory authority — the Information Commissioner’s Office (ICO), ico.org.uk.
Cookies and analytics
This site uses no cookies, no analytics tools and no social media plugins. It loads nothing from third-party servers — the fonts and graphics sit on the same server as the site. The Instagram and Facebook entries are plain links: unless you click them, those services learn nothing about your visit.