Brightside Beauty Privacy Policy

Brightside Beauty respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store and protect information when you visit our salon, contact us, make a booking or use our services in England.

Who we are Brightside Beauty is the data controller for the personal data described in this policy. If you have questions or wish to exercise your data protection rights, please contact us using the contact details provided by the salon.

Personal data we may collect Depending on how you interact with us, we may collect your name, contact details, booking and appointment information, records of services you receive, payment-related information, and communications with us. We may also collect information about allergies, sensitivities, medical conditions or other relevant health details where needed to assess suitability for a treatment and help keep you safe. We may collect technical information, such as cookie or device data, if you use our website.

How we use your information We may use your information to manage bookings, provide treatments, respond to enquiries, process payments, maintain business records, improve our services, and meet legal or regulatory obligations. We will use health information only where necessary for treatment safety or another lawful purpose. We may send marketing messages where permitted by law; you can opt out at any time.

Our lawful bases Under UK data protection law, we rely on one or more of the following lawful bases: performing a contract with you, taking steps at your request before entering into a contract, complying with legal obligations, pursuing our legitimate interests where these are not overridden by your rights, and obtaining your consent where required. Health information is handled only where a condition under applicable data protection law allows us to do so, such as your explicit consent or where necessary to provide a service with appropriate safeguards.

Sharing your information We may share relevant information with service providers who support our operations, such as booking, payment, website or IT providers. They may process information only as required to provide services to us and must protect it appropriately. We may also disclose information where required by law or to protect the rights, safety or property of our customers, staff or business. We do not sell your personal data.

International transfers If a service provider processes your information outside the United Kingdom, we will take steps required by applicable data protection law to protect it.

How long we keep your information We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining appropriate records and meeting legal obligations. Retention periods may vary depending on the type of information and the circumstances. When information is no longer needed, we will securely delete or anonymise it.

Your rights Subject to applicable law, you may have the right to request access to your personal data, have inaccurate information corrected, request deletion or restriction of processing, object to certain processing, and request data portability. Where we rely on consent, you can withdraw it at any time; this will not affect processing carried out before withdrawal. You may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies and website use If our website uses cookies or similar technologies, these may be used to operate the site, remember preferences or understand website usage. Where required, we will ask for your consent before using non-essential cookies. You can manage cookies through your browser settings and any cookie controls provided on our website.

Keeping your information secure We use appropriate measures designed to protect personal data from loss, misuse, unauthorised access or disclosure. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard the information we hold.

Children’s information Our services are not intended to be booked by children without the involvement of a parent or guardian. If you believe a child has provided us with personal data inappropriately, please contact us.

Changes to this policy We may update this policy from time to time. The latest version will be made available by the salon and will apply from the date it is published.