Privacy Policy
1. Who we are
Shaylashh Beauty is run by Shayla Prosser, based at 34 Park Crescent, Bargoed, CF81 8PN, United Kingdom. Shayla is the data controller for the personal data described in this policy.
- Email: [email protected]
- Phone: 07946 188558
2. What we collect and why
| What | Why | Our legal reason |
|---|---|---|
| What you type into the appointment request form on this website: your name, phone number, email address, the treatment you want, your preferred day and start time, and any message you choose to add. We also record that you ticked the privacy box. | To reply to your request, confirm or rearrange your appointment, and talk to you about your treatment. | Steps you ask us to take before booking a service. Our legitimate interest in replying to enquiries. |
| Technical information when you visit the website, such as your IP address and browser details. | To deliver the website securely and protect it and its form from spam and attacks. | Our legitimate interest in keeping the website secure. |
We don’t collect payment card details through this website. The form isn’t designed to collect health information, so please don’t put medical details in your message. We don’t use advertising or analytics trackers on this website. We never sell or rent your data, or share it with anyone for their own marketing.
In the salon. If you book and visit, Shayla may note down details needed for your treatment, such as your appointment, patch test results or any reaction. These are kept by Shayla in the salon, not collected through this website. Ask her if you’d like to know more.
Google Search Console. We use Google Search Console to see how this website appears in Google search results. It doesn’t place cookies on this website or follow you around it.
3. We don’t send marketing
We only use your details to reply to your enquiry and to deal with your appointment. We don’t send newsletters or marketing emails.
4. Who we share it with
We only share your information with providers who help us run the website, and only for these purposes:
- Cloudflare, Inc.: hosts this website, manages its domain settings, and protects it and its form from spam and attacks. When you visit, Cloudflare processes technical information such as your IP address and browser details.
- SMTP2GO (Sand Dune Mail Ltd): delivers the message from the website form to Shayla’s inbox. Data is processed in their EU data centre. SMTP2GO also uses limited data for its own purposes, such as security and fraud prevention. See smtp2go.com/privacy.
- Google (Gmail): Shayla’s email inbox, where your request is stored once it arrives. See policies.google.com/privacy.
- Cloud Crafters UK (Emlyn Roberts): built the website and looks after it and its technical setup for Shayla, including the form delivery.
- Authorities such as HMRC, or professional advisers, where the law requires it or where needed to run the business.
5. Outside the UK
Some of these providers may process data outside the UK. Where they do, the safeguards required by UK data protection law apply, such as UK adequacy regulations or the UK International Data Transfer Addendum.
6. How long we keep it
| Information | How long |
|---|---|
| Appointment requests and enquiries that don’t lead to an appointment | Up to 12 months, then deleted |
| Client and payment records for appointments that go ahead | As long as the law requires for business accounts, usually up to 6 years |
7. Your rights
Under UK data protection law, you have the right to:
- Ask for a copy of the personal data we hold about you
- Ask us to correct anything that’s wrong
- Ask us to delete your data
- Object to or restrict how we use your data
- Ask for your data in a portable format
Email [email protected] with “Privacy Request” in the subject line. We’ll respond within one month.
8. Complaints
If you’re unhappy with how we’ve handled your data, please contact us first at [email protected]. We’ll acknowledge your complaint within 30 days and tell you the outcome.
You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
9. Cookies
This website doesn’t use analytics or advertising cookies. See our Cookie Policy for the details.
10. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top always shows the most recent change.