1. INTRODUCTION
This Privacy and Personal Data Protection Policy (“Privacy Policy”) explains how HAIRHOUSE LONDON LTD (“we”, “our”, “us”) collects, uses, stores, and protects personal data when you use our website https://hairhouse.uk (“the Website”). We are the Data Controller for personal data collected via this Website under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. By using the Website, you confirm that you have read and understood this Privacy Policy. If you do not agree with its terms, you must stop using the Website immediately.

2. DEFINITIONS
For the purposes of this Policy: Website – the site located at https://hairhouse.uk, operated by HAIRHOUSE LONDON LTD. Website Administration – authorised employees acting on behalf of HAIRHOUSE LONDON LTD who manage the Website and determine the purposes and means of processing personal data. User – any individual accessing or using the Website. Personal Data – any information that can directly or indirectly identify a living individual. Processing – any operation performed on personal data, such as collection, storage, use, disclosure, or deletion. Confidentiality of Personal Data – the obligation not to disclose personal data without the consent of the data subject or another lawful basis. Cookies – small text files stored on a user’s device by a website. IP Address – a unique numerical identifier assigned to a device connected to the internet.

3. AGE RESTRICTIONS
You must be at least 18 years old to book services or register an account on the Website. By doing so, you confirm that you have the legal capacity to enter into contracts and consent to the processing of your personal data. If we have reason to believe you are under the legal age, we may request proof of age or seek parental/guardian consent before continuing to process your data.

4. DATA WE COLLECT
We may collect the following categories of personal data: Name and surname Contact telephone number Email address Booking or service preferences Any other personal information you choose to provide in forms or communications We may also collect automatically: IP address Browser type and version Device type and operating system Date, time, and pages accessed Referring website URLs Cookie data You may disable cookies in your browser settings, but this may affect certain website functionalities.

5. PURPOSES FOR PROCESSING PERSONAL DATA
We process your personal data for the following purposes: To identify you as a customer or website user To provide you with our services and process bookings To communicate with you regarding orders, bookings, or inquiries To send marketing materials (only with your explicit consent) To prevent fraud and ensure security To improve our website and services To comply with legal obligations

6. DATA RETENTION
We retain personal data only for as long as necessary for the purposes set out in this Privacy Policy or as required by law. When data is no longer needed, it will be securely deleted or anonymised.

7. LAWFUL BASIS FOR PROCESSING
We process personal data based on one or more of the following lawful grounds: Consent (UK GDPR Art. 6(1)(a)) – for example, marketing emails you have agreed to receive. Contractual necessity (Art. 6(1)(b)) – for example, fulfilling your booking. Legal obligation (Art. 6(1)(c)) – for example, keeping financial records. Legitimate interests (Art. 6(1)(f)) – for example, improving our services.

8. DATA SHARING
We may share your personal data with: Service providers (e.g., booking platforms, payment processors, courier/delivery companies) Professional advisers (e.g., accountants, legal counsel) Law enforcement or regulatory bodies when legally required We do not sell or rent personal data to third parties.

9. INTERNATIONAL DATA TRANSFERS
If we transfer personal data outside the UK, we ensure it is protected by appropriate safeguards, such as adequacy decisions or standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).

10. SECURITY MEASURES
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction.

11. YOUR RIGHTS UNDER UK GDPR
You have the right to: Access your personal data Rectify inaccurate or incomplete data Request erasure (“right to be forgotten”) Restrict processing Data portability Object to processing, including direct marketing Withdraw consent at any time (without affecting prior lawful processing) To exercise your rights, contact us via the Contact section of our Website.

12. COMPLAINTS
If you are dissatisfied with how we handle your data, you can file a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk.

13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The latest version will always be available on the Website.

Contact Details: +4420 30 955 555

HAIRHOUSE LONDON LTD

Company Number: 14724377

Registered in England and Wales on 13th March 2023

Email: info@hairhouse.uk

Address: 8 LOWER GROSVENOR PLACE, London, SW1