Hello Beauty Salon
Privacy Policy
At Hello Beauty Salon, your privacy matters as much as your beauty. We're committed to handling your personal information responsibly and transparently, in full compliance with UK GDPR. This Privacy Policy explains how we collect, use, and protect your data when you visit our salon, book online, or communicate with us — so you can relax, knowing your details are safe in trusted hands.
We are committed to protecting your personal information in accordance with the UK General Data Protection Regulation (GDPR). This policy outlines how we collect, use, store, and protect your data when you use our services.
About Us
This Privacy Policy explains how Edinburgh Creatives Ltd (Company number SC735968), trading as Hello Beauty Salon, collects, uses, and protects your personal information. Registered address: 9a Tinto Place, Edinburgh, EH6 5GD. Trading address: 13 South Charlotte Street, Edinburgh, EH2 4AS. Email: info@hellobeautysalon.com | Tel: +44 7394 448001.
Information We Collect
We collect personal information that you provide directly or indirectly when you book, contact, or visit us. This may include: Name, contact details (phone, email), and appointment information. Health and allergy information relevant to treatments or patch tests. Payment details (processed securely via Teya, Salonized, Treatwell, or Fresha). Photos or videos (with consent) for marketing or records. Communications via phone, WhatsApp, Instagram DMs, or email. CCTV footage (for safety and security). Service notes, loyalty history, and stylist feedback.
How We Use Your Data
We use your data to: Manage appointments, services, and communications. Process payments and record transactions. Conduct patch tests and ensure treatment safety. Respond to messages, queries, and complaints. Send marketing updates (only if you've opted in). Comply with legal and tax obligations.
Lawful Bases for Processing
We process your data under one or more lawful bases defined by the UK GDPR: Contract – to provide salon services you've booked. Consent – for marketing, photography, or sensitive data such as patch tests. Legitimate Interest – for salon administration, security, and service quality. Legal Obligation – to meet tax and business compliance duties.
Sharing Your Data
We only share information where necessary to deliver our services: Stylists and salon team members (to manage bookings). Service providers such as Teya, Salonized, Treatwell, and Fresha. Marketing and mailing list platforms (e.g. Mailchimp or equivalent UK-GDPR-compliant provider). Legal or regulatory authorities if required by law. We never sell or trade client data.
Payments & Third-Party Systems
All online and in-salon payments are processed securely by trusted partners such as Teya, Salonized, Treatwell, and Fresha. We do not store or have access to your full payment details. Each third party follows its own strict privacy and security standards.
Data Retention
We retain personal data only as long as necessary: Booking and service records: 3 years from the last visit. Financial records: 6 years (for HMRC compliance). Patch test and consent forms: up to 5 years. CCTV footage: up to 30 days unless required for investigation.
Data Security
We use secure systems and encrypted storage to protect your data against unauthorised access, loss, or misuse. While we follow best practices, no online transmission can be guaranteed 100% secure, but we take all reasonable steps to ensure your information remains protected.
Your Rights
Under UK GDPR, you have the right to: Access, correct, or delete your personal data. Restrict or object to processing. Withdraw consent for marketing at any time. Request a copy of your data in portable format. Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Marketing & Mailing Lists
You may subscribe to our salon updates or newsletters via our website. We only send marketing messages with your explicit consent, and you can unsubscribe at any time using the link in our emails or by contacting info@hellobeautysalon.com.
Cookies & Analytics
Our website may use cookies and analytical tools to improve functionality and monitor performance. You can manage cookie preferences via your browser or read more in our separate Cookie Policy.
Patch & Strand Test Records
For colour, keratin, or chemical treatments, patch tests are required at least 48 hours before the appointment. Clients who waive a patch test must sign a consent form acknowledging personal responsibility for any reactions. Signed forms and results are securely stored for up to 5 years.
CCTV Notice
CCTV may operate within salon premises to ensure client and staff safety. Footage is securely stored and automatically deleted after the standard retention period unless required for legitimate security or legal reasons.
Updates to this Policy
We may update this Privacy Policy periodically to reflect legal, technical, or operational changes. All updates will be posted on our website with a revised "Last updated" date.
Contact Us
For privacy questions, data requests, or concerns, please contact: Hello Beauty Salon (Edinburgh Creatives Ltd), 13 South Charlotte Street, Edinburgh, EH2 4AS. Email: info@hellobeautysalon.com | Tel: +44 7394 448001
Your Privacy is Our Priority
We are dedicated to protecting your personal information and maintaining your trust. If you have any questions about how we handle your data or wish to exercise your GDPR rights, please contact us.
To lodge a complaint with the UK data protection authority, visit ico.org.uk