Privacy & Cookies Policy

Last updated: August 5, 2025

Welcome to Angel's Hair Mall. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy and Cookies Policy explains how we collect, use, store, and protect your personal information.

1. Who We Are

Hair Mall is the data controller responsible for your personal data. Contact us at:

• Email: privacy@angelshairmall.com
• Address: 557 George Street, Aberdeen, AB25 3XX

2. Data We Collect

We collect the following personal data:

• Identity and Contact Data: Name, email address, phone number when you book an appointment or log in.
• Booking Data: Appointment details, service preferences, and payment information (processed securely via Stripe).
• Technical Data: IP address, browser type, and device information via cookies and analytics.

3. How We Use Your Data

We process your data for:

• Service Delivery: To manage bookings and send verification codes (legal basis: contract).
• Notifications: To inform you and our staff about bookings via email or SMS (legal basis: legitimate interest).
• Website Improvement: To analyze usage via cookies (legal basis: consent).

4. Cookies

We use cookies to enhance your experience:

• Strictly Necessary Cookies: Essential for website functionality (e.g., session management).
• Analytics Cookies: To understand how you use our site (e.g., Google Analytics, anonymized).

You can manage cookie preferences via the banner below or your browser settings. See allaboutcookies.org for details.

5. Your Rights

Under UK GDPR, you have the right to:

• Access your data
• Correct inaccuracies
• Request deletion
• Restrict or object to processing
• Data portability
• Withdraw consent

Contact privacy@youractualdomain.com to exercise these rights. You can also complain to the ICO (ico.org.uk).

6. Data Security

We use SSL/TLS encryption, access controls, and regular security audits to protect your data. In case of a breach, we will notify you and the ICO within 72 hours if required.

7. Data Retention

We retain booking data for 6 months after your appointment and verification codes for 1 hour. You can request deletion earlier.

8. Third Parties

We share data with:

• Stripe (payment processing)
• Mail servers (email notifications)
• SMS providers (if enabled)

All third parties comply with UK GDPR via Data Processing Agreements.

9. International Transfers

Data may be transferred outside the UK (e.g., Stripe, US-based). We use Standard Contractual Clauses to ensure compliance.

10. Updates

We review this policy regularly. Changes will be posted here.