Privacy Policy

---

Privacy Policy

WHAT IS THE SCOPE OF THIS PRIVACY STATEMENT?

This Privacy Statement applies to websites, mobile applications, and digital services that link to or post this Privacy Statement. This Privacy Statement is intended to let you know what Hair Stort, including our affiliated entities such as our booking system "Timely" (referred to collectively as "Hair Story," "we," "our," or "us") may collect about you, how we collect your Personal Data, for what purposes we use your Personal Data, to whom we may disclose your Personal Data, and what rights you may have to limit our use of your Personal Data. In this Privacy Statement, we will collectively refer to the websites, applications, booking system and digital services that may link to or post this Privacy Statement as "websites."

When you use our services, you agree to our privacy policy and you consent to our collection storage, use and disclosure of your Personal Data for the purpose of making our services available to you, in accordance with this policy. Hair Story processes Personal Data for numerous purposes and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each may differ.

We will collect, store, use and disclose Personal Data in accordance with all applicable laws relating to the protection of Personal Data, including the EU Data Protection Directive 95/46/EC, the EU General Data Protection Regulation 2016/679, the EU ePrivacy Directive 2002/58/EC as amended by Directive 2009/136/EC, as amended or superseded from time to time, and any national implementing legislation (“Data Protection Laws”).

For the purpose of Data Protection Laws, in relation to any Personal Data you submit to our platform, we will be the data controller.

WHAT PERSONAL DATA MAY WE COLLECT ABOUT YOU?

Through our websites linking to this Privacy Statement, we will collect and process Personal Data that does not directly identify you by name (such as IP Address) or include your contact information, but which may be used to identify that a specific computer or device has accessed our website and which if combined with certain other information could be used to identify you. We receive this Personal Data through your interactions with our websites.

The Personal Data we process about you through our websites linking to this Privacy Statement may include the following categories of Personal Data:

·  Demographic data;

·  Online identifiers;

·  IP address;

·  Data from our cookies;

·  3rd party cookies; and/or

·  Social media use and utilization

·  Online Booking System "Ovatu"

Where we collect directly identifiable Personal Data about you, the following privacy notices will provide you with additional information around what we may collect, how we will collect it, for what purposes we may collect it, to whom we may disclose it, and what rights you may have to limit our use of it.

HOW WILL WE USE YOUR PERSONAL DATA?

Processing of your Personal Data includes where we may record, organise, structure, store, adapt or alter, retrieve, consult, use, disclose by transmission, dissemination, or otherwise make available, align or combine, restrict, erase, or destroy your Personal Data.

We may process your Personal Data for the following purposes:

·  Our company compliance and facility and network security purposes;

·  Authorizing, granting, administering, monitoring, and terminating access to or use of Hair Story's systems, facilities, records, property, and infrastructure;

·  Tracking your interactions with us;

·  Auditing our programs and services for compliance purposes;

·  Where we have Legal obligations to process the personal data;

·  Statistical analysis, including analytics performed by our vendors;

·  Website administration; and/or

·  Marketing Activities, including Third Party Cookie Tracking and Creating an Interest-based Profile related to your interactions with us or others

For any additional purposes where we are required to notify you and get your consent, including those purposes required by local law, we will obtain your consent before we process your Personal Data for those purposes.

WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

The applicable legal basis for which we process your Personal Data for the specific purposes listed above, include the following:

·  Based on your consent: In some cases, we may ask you for your consent to collect and process your Personal Data. If you choose to provide us with your consent, you may later withdraw your consent (or opt-out) by contacting us as described in the "how do you contact us" section below. Please note that if you withdraw your consent it will not affect any processing of your Personal Data that has already occurred. Where we process your Personal Data based on consent, we will provide more detailed information to you at the time when we obtain your consent.

·  Our legitimate interest: In specific circumstances, we may need to process your Personal Data to comply with a relevant law/regulation or to fulfil our obligations under a contract to which you are subject. Where we process your Personal Data to meet our legal obligations, you will likely not be permitted to object to this processing activity, but you will usually have the right to access or review this information unless it would impede our legal obligations. Where we are processing to fulfil our contract obligations under a contract where you are a party, you might not be able to object to this processing, or if you do choose to opt-out or object to our processing, it may impact our ability to perform a contractual obligation that you are owed.

·  Compliance with applicable laws or performance of a contract: We may process your Personal Data based on our legitimate interests in communicating with you and managing our interactions with you regarding our products and services, scientific research, and education opportunities. In addition to the other rights you may have described below, you have the right to object to such processing of your Personal Data. You can register your objection by contacting us as described in the "how do you contact us" section below.

COOKIES AND SIMILAR TECHNOLOGIES THAT COLLECT PERSONAL DATA

Web beacons

Our websites may use a technology known as web beacons that allows the collection of web log information. A web beacon is a tiny graphic on a web page or in an e-mail message designed to track pages viewed or messages opened. Web log information is gathered when you visit one of our websites by the computer that hosts our website (called a "webserver").

On certain web pages or in emails we send to you, we may utilize a technology called a "web beacon" (also known as an "action tag" or "clear GIF technology"). We may use web beacons to help determine which email messages sent by us were opened and whether a message was acted upon. Web beacons also help analyse the effectiveness of websites by measuring the number of visitors to a site or how many visitors clicked on key elements of a site.

Cookies

This website may use a technology called a "cookie". A cookie is a small data file that a website can place on your computer’s hard drive, where your internet browser files are kept. A cookie saves you the trouble of re-entering certain information in some registration areas because cookies can be used to enable a site to "remember" information a visitor has previously inputted. A cookie also helps deliver content used-specific information to you and track how sections of the website are used. Cookies can be placed on your computer both by us and by third parties with whom we have a contractual relationship, such as web analytic services and advertising network services. With most Internet browsers or other software, you can change your browser settings to erase cookies from your computer hard drive, block all cookies, or receive a warning before a cookie is stored. Please check your browser instructions to learn more about these functions. If you reject cookies, functionality of the site may be limited, and you may not be able to take advantage of many of the site's features.

Do Not Track

There are different ways you can prevent tracking of your online activity. One of them is setting a preference in your browser that alerts websites you visit that you do not want them to collect certain information about you. This is referred to as a Do-Not-Track ("DNT") signal. Please note that currently our websites and web-based resources do not respond to these signals from web browsers. At this time, there is no universally accepted standard for what a company should do when a DNT signal is detected.

Google Analytics

Google Analytics may be used to help make our website work better and to help us understand what parts of the website are being utilized. Google Analytics uses technical tools such as, first-party cookies and JavaScript code, to collect information about visitors. Google Analytics service tracks visitors to the site who have JavaScript enabled. Google Analytics anonymously tracks how visitors interact with a website, including where they came from and what they did on a site. Google Analytics collects the information set forth above from users.

This information is used to administer and update the website, and we will also assess whether the visitors to the site match the expected site demographics and determine how key audiences are navigating the content.

A. Opt-Out Provision:

Google analytics offers an opt-out provision for website visitors who do not want their data to be collected. You can receive more information about this option here: http://tools.google.com/dlpage/gaoptout.

B. Google's Use of Data:

Google and its wholly owned subsidiaries may retain and use, subject to the terms of its Privacy Policy (located at http://www.google.com/privacy.html, or such other URL as Google may provide from time to time), information collected in your use of the Google Analytics Information Disclosures and Sharing.

Social Media Plugins

Our websites may use Social Media Plugins to enable you to easily share information with others. When you visit our websites, the operator of the social media plugin that is on our website can place a cookie on your computer that lets that operator recognize individuals on their website who have previously visited our sites. If you have previously logged into the social media website while browsing on our website, social media plugins may allow that social media website to receive directly identifiable information about you that shows you have visited our website. The social media plugin may collect this information for visitors who have logged into social networks, whether or not they specifically interact with the plugin on our website. Social media plugins also allow the social media website to share information about your activities on our website with other users of their social media website. Hair Story does not control any of the content from social media plugins. For more information about social plugins from social media websites you should refer to those sites’ privacy and data sharing statements.

Timely Booking System

Timely our booking system ensures that our account and all of its data is encrypted, stored and backed up securely on servers in the United States, which complies with GDPR via the US/EU Security Shield Framework.

A copy of their Privacy Policy can be found below.

https://www.gettimely.com/support/privacy/

CHILDREN'S PERSONAL DATA

This site is not intended for or designed for individuals under the age of 16. We do not knowingly collect Personal Data from any person under the age of 16.

HOW DO WE PROTECT YOUR PERSONAL DATA?

We use industry-standard administrative, technical, and physical safeguards to protect your Personal Data against loss, theft, misuse, unauthorised access, modification, disclosure, and destruction. We restrict access to your Personal Data to only those employees and third parties acting on our behalf who have a legitimate business need for such access. We will only transfer your Personal Data to third parties acting on our behalf where we have received written assurances that your Personal Data will be protected in a manner consistent with this Privacy Notice and our privacy policies and procedures.

TO WHOM AND WHEN WILL WE DISCLOSE OR SHARE YOUR PERSONAL DATA?

We will share or disclose your Personal Data with the following entities:

·  Third parties with whom we contract to carry out services on our behalf to perform activities or functions related to the processing purposes regarding your Personal Data that are described above. If we do, we will require that these third parties acting on our behalf protect the confidentiality and security of your Personal Data that we share with them. Unless otherwise specifically stated in this Privacy Statement, these third parties must contractually agree that they will not use or disclose your Personal Data for any other purposes than necessary to provide us services, perform services on our behalf, or to comply with applicable laws or regulations.

·  Government agencies, auditors, and authorities. We may disclose your Personal Data to government agencies, authorities, and auditors in response to authorized information requests or as otherwise required by laws, regulations, or industry codes.

·  Potential or actual third party purchasers. If we decide to reorganize or divest our business through a sale, merger, or acquisition, we may share your Personal Data with actual or prospective purchasers. We will require that any such purchasers treat your Personal Data consistently with this Privacy Notice.

Transferring your information outside of Europe

As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Economic Area (“EEA”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EEA. You should be aware that these countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EEA in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy.

If you use our services while you are outside the EEA, your information may be transferred outside the EEA in order to provide you with those services. We undertake regular reviews of who has access to information that we hold to ensure that your info is only accessible by appropriately trained staff, volunteers and contractors.

HOW LONG WE KEEP PERSONAL DATA FOR

We will keep your Personal Data for the duration of the Service and in accordance with your instructions or for such periods as may be required by law.

Changes to this policy

Any changes we may make to this policy in the future will be posted on this website so please check this page occasionally to ensure that you’re happy with any changes. If we make any significant changes we’ll make this clear on this website.

HOW DO YOU CONTACT US IF YOU HAVE ANY QUESTIONS OR CONCERNS?

Please contact Hair Story using the below information to:

·  Ask questions;

·  File a concern or complaint;

·  Opt-out of a program or service; and/or

·  To exercise any of your rights listed above, including access, correction, portability, objection, restriction, and erasure.

Hair Story
Mailing Address: Cheshire Beauty & Wellbeing, Causeway Bridges Farm, Old Alder Lane, Warrington WA5 4BN
Email Address: jacqueline@hairstory.co.uk 

Review of this Policy

We keep this policy under regular review. This policy was last updated in 20 March 2021.