Privacy Policy

1. Introduction

Welcome to Hair & Beauty by Sandyrule (“we”, “us”, “our”).

Hair & Beauty by Sandyrule is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, make a booking, contact us, or use our services.

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy laws.

2. Business Information

Information Commissioner’s Office (ICO) Registration

Hair & Beauty by Sandyrule, operated by Sandra Eguavoen, is registered with the Information Commissioner’s Office (ICO) as a data controller in accordance with the UK GDPR and the Data Protection Act 2018.

ICO Registration Number: ZC195918

3. Information We Collect

Depending on how you interact with us, we may collect:

Personal Information

• Full name
• Email address
• Telephone number
• Home or appointment address (for mobile services)

Appointment Information

• Booking date and time
• Service requested
• Hair preferences
• Hair length and texture
• Appointment history
• Payment records

Health Information

Where relevant to your treatment, we may ask for information regarding:

• Allergies
• Scalp conditions
• Hair conditions
• Pregnancy (where relevant)
• Medical information that may affect a treatment

This information is collected solely to help us provide services safely.

Photographs and Videos

With your permission, we may take photographs or videos before, during or after your appointment for:

• Portfolio purposes
• Social media
• Marketing
• Website galleries

You may decline photography at any time without affecting your appointment.

4. How We Collect Your Information

We may collect your information when you:

• Book an appointment
• Contact us by phone
• Contact us via WhatsApp
• Complete an online booking
• Submit an enquiry through our website
• Contact us via social media
• Purchase products or services
• Subscribe to future newsletters or promotions

5. How We Use Your Information

Your information is used to:

• Schedule and manage appointments
• Provide requested services
• Process payments
• Respond to enquiries
• Contact you regarding appointments
• Improve our services
• Maintain client records
• Comply with legal obligations
• Prevent fraud
• Send marketing communications where you have given your consent

6. Legal Basis for Processing

We process your information because:

• It is necessary to fulfil our contract with you.
• We have a legal obligation to keep certain records.
• We have a legitimate business interest in operating and improving our services.
• You have given your consent where required, such as for marketing emails or the use of photographs.

7. Online Bookings

Appointments booked through TidyCal are subject to both this Privacy Policy and TidyCal’s own privacy practices. Please review TidyCal’s privacy information when making an online booking.

8. Payments

Payments may be processed using secure third-party payment providers, including Stripe. Hair & Beauty by Sandyrule does not store your full payment card details.

9. Third-Party Services

We may use trusted third-party providers including:

• TidyCal
• Stripe
• Zoho Mail
• Google Maps
• Website hosting providers
• Analytics providers (if enabled in the future)

Each provider processes information according to its own privacy policy.

10. Marketing Communications

We may occasionally send promotional emails, offers, newsletters or special announcements. We will only send marketing communications where permitted by law or where you have given your consent. You may unsubscribe at any time.

11. Cookies

Our website uses cookies to improve functionality and user experience. Cookies may be used to:

• Remember your preferences
• Support online bookings
• Improve website performance
• Analyse visitor activity
• Enhance website security

A separate Cookie Policy explains this in more detail.

12. Data Retention

We keep your personal information only for as long as necessary. Generally:

• Financial records are retained for up to seven years where required by law.
• Appointment records are retained while reasonably necessary for business purposes.
• Marketing information is retained until you unsubscribe.
• Photographs are retained until consent is withdrawn, unless we are legally required to keep them.

13. Your Rights

You have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of your personal information where legally permitted.
• Object to certain types of processing.
• Withdraw consent at any time where consent is the legal basis for processing.
• Request restriction of processing.
• Request transfer of your data where applicable.

14. Data Security

We take appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, loss or misuse. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

15. Children’s Privacy

Clients under the age of 15 must be accompanied by a parent or legal guardian. Where personal information relates to a child, the parent or legal guardian is responsible for providing consent where required.

16. International Transfers

Where third-party service providers store or process information outside the United Kingdom, we will ensure appropriate safeguards are in place to protect your personal data.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

18. Contact Us

If you have any questions regarding this Privacy Policy or how your personal information is handled, please contact:

19. Complaints

If you are unhappy with how we handle your personal information, please contact us first so that we have the opportunity to resolve your concerns. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).