Privacy Policy (UK GDPR)

Derevianko Beauty Limited t/a Persona (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Persona is a hair salon business based in the United Kingdom.

If you have any questions about this policy or how we use your data, you can contact us at:

Email: persona.hair.hub@gmail.com

2. What personal data we collect

We may collect and process the following personal data:

  • Name
  • Email address
  • Telephone number
  • Appointment and booking details
  • Consultation information provided by you
  • Payment-related information (processed securely via third-party providers)
  • Marketing preferences
  • CCTV images where applicable

We do not collect medical or health-related information online.

3. How we collect your data

We collect personal data when you:

  • Complete a contact or enquiry form on our website
  • Book an appointment online or in person
  • Complete a consultation form
  • Sign up to receive marketing communications
  • Communicate with us by email, phone or SMS
  • Visit our premises where CCTV is in operation

4. How we use your data

We use your personal data to:

  • Manage appointments and provide salon services
  • Communicate with you about bookings, changes or cancellations
  • Process payments via secure third-party providers
  • Maintain client records
  • Send service-related messages, including reminders
  • Send marketing communications where you have consented or where we have a legitimate interest
  • Comply with legal and regulatory obligations
  • Maintain safety and security at our premises (CCTV)

5. Legal basis for processing

We process your personal data under the following lawful bases:

  • Contract – to provide services you have booked
  • Consent – for marketing communications where required
  • Legitimate interests – to operate and improve our business, manage appointments, and communicate with clients
  • Legal obligation – where required by law

You can withdraw your consent to marketing at any time.

6. Marketing communications

We may send you marketing emails or SMS messages about our services where:

  • You have given consent, or
  • We have a legitimate interest and you have not opted out

You can unsubscribe at any time using the link in our communications or by contacting us directly.

7. Data sharing

We may share your personal data with trusted third parties, including:

  • Online booking and salon management systems
  • Payment processors
  • Accountants or professional advisers
  • Marketing service providers (email or SMS platforms)
  • Suppliers or technicians where necessary to deliver services

All third parties are required to handle your data securely and lawfully.

We do not transfer your personal data outside the UK.

8. Data storage and security

Client records may be stored digitally and/or in paper form.

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or disclosure.

9. Data retention

We retain personal data only for as long as necessary, including:

  • Client records: while you remain an active client and for a reasonable period thereafter
  • Financial records: as required by law
  • Marketing data: until you withdraw consent or opt out

10. CCTV

CCTV operates at our premises for safety and security purposes. Cameras are clearly visible. Footage is retained for a limited period and accessed only where necessary.

11. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.