Privacy Policy

Who we are

Herne Bay Beauty (“we”, “us”) operates this website and the salon at The Mall Shopping Centre, 116 High Street, Herne Bay, Kent, CT6 5JY. We are the data controller for the personal information described in this policy.

If you have any questions about this policy or about how we handle your information, email us at suwanna@hernebaybeauty.co.uk, call us on 07337 350130, or write to us at the address above.

What information we collect

Depending on how you interact with us, we may collect:

• Enquiry details: your name, phone number, email address, the treatment you are interested in, a preferred date and time, and anything you write in the message box of our contact form.
• Appointment and treatment records: notes taken in the salon, including consultation forms and any health information you give us so that a treatment can be carried out safely.
• Technical information: basic information your browser sends when you visit the site, such as your IP address and the pages you view, which is used to keep the site secure and working.

Health information

Some treatments require us to ask about your health, medication or allergies. This is special category data under UK data protection law and we treat it accordingly. We collect it only where it is necessary to carry out a treatment safely, we keep it secure, and we do not use it for marketing.

Consultation and treatment records are kept both on paper at the salon and on password-protected digital systems. Both are stored securely and are accessible only to the therapists involved in your treatment.

Why we use your information, and our lawful basis

• To respond to your enquiry and arrange appointments: because it is necessary to take steps at your request before providing a service, and because we have a legitimate interest in replying to people who contact us.
• To carry out treatments safely: on the basis of your explicit consent where health information is involved.
• To keep records required of us: where we have a legal obligation to do so.
• To keep the website secure: on the basis of our legitimate interest in preventing misuse.

Who we share it with

We do not sell your personal information, and we do not share it for anyone else’s marketing. We do use service providers who process data on our behalf:

• Our website host, which serves this site to visitors.
• Our database, which stores contact form submissions securely.
• Our email providers (Microsoft and Resend), which deliver your enquiry to the salon by email so we can reply to it.
• Google Maps, which supplies the map embedded on our contact page. If the map loads, Google may receive your IP address; see Google’s own privacy policy for details.

We do not use an online booking or payment system. Appointments are arranged by phone or in person, and payment is taken in the salon, so no card details are collected or stored through this website.

We may also disclose information where we are required to by law.

Where your information is stored

Enquiries submitted through this website are stored on servers in the United Kingdom.

Some of our providers, including our email provider, are based in the United States. Where personal data is transferred outside the UK, it is protected by the UK Extension to the EU–US Data Privacy Framework or by an International Data Transfer Agreement.

How long we keep it

We keep website enquiries for 12 months after your last contact with us, unless you become a client, in which case your details form part of your client record.

Treatment and consultation records are kept for 7 years after your last appointment, in line with our insurer’s requirements. After that, information is securely deleted or destroyed.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that is inaccurate;
• ask us to delete information where there is no good reason for us to keep it;
• object to, or ask us to restrict, how we use your information;
• ask us to transfer your information to another provider; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us using the details above. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

Information about the cookies this website uses is set out separately in our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last revised.