Privacy Policy & Cookie Notice

Catherine Taylor Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains what personal information we collect when you visit our website or use our salon services, why we collect it, how we use it, and the choices you have.

This policy applies to information we collect through our website at www.catherinetaylorhairandbeautysalon.co.uk and in person at our salon. By using our website and services, you agree to the practices described in this policy.

We may collect and process the following categories of personal information:

• Contact details — your name, email address, telephone number and postal address, which you provide when booking an appointment, making an enquiry or contacting us.
• Appointment & treatment records — details of the services you book, your treatment history, consultations, patch tests and notes relevant to providing safe and suitable treatments.
• Health & wellbeing information — any medical, skin or allergy information you share with us so we can safely tailor treatments (for example, contraindications for laser hair removal or pregnancy massage).
• Payment information — we do not store full card details. Card payments are processed securely by our payment provider and our online booking provider.
• Website & technical data — such as your IP address, browser type and device information, collected automatically through cookies and similar technologies (see the Cookie Notice below).
• Marketing — if you opt in, we may use your email or telephone number to send you occasional updates, offers and news.

We use your personal information for the following purposes:

• To book, confirm and manage your salon appointments.
• To provide your chosen treatments safely and to keep accurate treatment and consultation records.
• To carry out consultations and, where relevant, patch tests and contraindication checks.
• To process payments and maintain financial records.
• To respond to your enquiries, feedback and customer service requests.
• To send marketing communications, only where you have given us consent to do so.
• To comply with our legal and regulatory obligations and to protect the safety and wellbeing of our clients and staff.

Under UK GDPR, we rely on the following lawful bases to process your personal information:

• Performance of a contract — to provide the salon services you have requested and to manage appointments.
• Consent — for marketing communications and for any non-essential cookies on our website.
• Legal obligation — where we are required to keep records for tax, health and safety or regulatory purposes.
• Legitimate interests — to respond to your enquiries and to keep our business records accurate and secure.

We do not sell your personal information. We may share it with trusted third parties only where necessary to provide our services:

• Our online booking system (Phorest) — used to manage appointments and client records.
• Payment processors — to take secure card payments.
• Third-party content providers — such as Vimeo (for video content) and Google (for fonts), which may set cookies on your device.
• Professional advisers & authorities — where required by law, regulation or to protect the health and safety of our clients.

We keep your personal information only for as long as is necessary for the purposes set out in this policy. Appointment and treatment records are retained in line with good practice and our legal obligations; marketing preferences are kept until you ask us to stop. You can ask us to delete your information at any time (subject to any records we are required to keep by law).

Under UK GDPR you have the following rights in relation to your personal data:

• The right to access the personal information we hold about you.
• The right to have inaccurate information corrected.
• The right to request erasure (deletion) of your personal information.
• The right to restrict or object to our processing of your data.
• The right to data portability — to receive your data in a structured format.
• The right to withdraw consent at any time, where we rely on consent.
• The right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

To exercise any of these rights, please contact us using the details below.

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or loss. While we strive to protect your data, no method of transmission over the internet is completely secure.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.