Who I am
HairBiba is a hairdressing business run by Biba from a home salon at 10 High Street, Yelling, Cambridgeshire PE19 6SD, with a mobile service across Cambridgeshire and Bedfordshire. For anything in this policy you can reach me on 07960 632388, on WhatsApp on the same number, or by email at hello@hairbiba.co.uk.
For the purposes of UK data protection law I am the data controller for the information described below. That means I decide what is collected and what happens to it.
What I collect
I keep as little as I can. In practice that is:
- Your name and contact details. Phone number, and an email address if you give one.
- Your appointment history. What you had done and when, so I know where we left off.
- Notes about your hair. Colour formulas, previous treatments, what worked and what did not.
- Your address. Only if you book a home visit, and only so I can get there.
- Allergy and skin test information. Where colour is involved, the result of your patch test and anything you tell me about sensitivities or reactions.
- Photographs. Only ever with your say-so, and I will ask again before anything goes on social media.
- Messages. Texts, WhatsApp messages and emails between us.
Allergy and skin test information counts as health data, which the law treats as a special category needing extra care. I collect it because colour cannot be applied safely without it, I rely on your explicit consent to hold it, and it is used for nothing except keeping your appointment safe.
Why I hold it, and on what basis
| What for | Lawful basis |
|---|---|
| Booking and carrying out your appointment | Performance of a contract with you |
| Contacting you about an appointment, including reminders and changes | Performance of a contract with you |
| Colour notes and formulas, so results stay consistent | Legitimate interests: doing the job properly |
| Allergy and patch test records | Your explicit consent |
| Photographs of your hair | Your consent, which you can withdraw at any time |
| Keeping records of what was paid | Legal obligation: tax and accounting |
| Answering an enquiry that does not lead to a booking | Legitimate interests: replying to you |
Who else sees it
I do not sell your information, and I do not share it for anyone else's marketing. It is handled by:
- Fresha, the booking system. Your name, contact details and appointment history sit in Fresha because that is where bookings are taken and reminders are sent. Their privacy policy is on fresha.com.
- Wix, who host this website. They handle the technical side of serving pages to you. Their privacy policy is on wix.com.
- Google, if you use the map on this site or find me through my Google listing. Google sets its own terms, which are on policies.google.com.
- My accountant and HMRC, for the financial records I am required to keep.
Some of these companies operate outside the UK, so your information may be handled abroad. Where that happens they are required to protect it to UK standards.
How long I keep it
Client and appointment records are kept while you are a client and for a reasonable period afterwards, in case you come back and so that colour history is not lost. Records that relate to payment are kept for six years, because HMRC requires it. Patch test records are kept while they are relevant to your future appointments. Anything I no longer need is deleted, and you can ask me to delete your records sooner.
Cookies and this website
This site does not run advertising trackers, and there is no analytics account following you around. A small number of cookies are set by the hosting platform so that pages load correctly and securely:
| Cookie | Set by | What it does |
|---|---|---|
| wixSession | Wix | Keeps your visit working across pages |
| client-session-bind | Wix | Security: ties the page to your browser session |
| server-session-bind | Wix | Security: the same check on the server |
| bSession | Wix | Measures how quickly pages load |
The map in the footer is provided by Google, and loading it means your browser contacts Google's servers. If you would rather that did not happen, most browsers let you block third-party content, and you can always ring me for directions instead.
You can delete cookies at any time in your browser settings. Doing so will not stop you using this site.
Your rights
Under UK data protection law you can ask me to:
- Tell you what I hold about you, and give you a copy
- Correct anything that is wrong
- Delete what I hold, where I am not required to keep it
- Stop using it in a particular way, or restrict what I do with it
- Hand it over in a portable form, or send it to someone else
- Withdraw consent you have given, for photographs for example, at any time
Just ask, on the phone or in writing. There is nothing to pay and I will respond within one month. If I have got something wrong I would rather you told me directly so I can fix it, but you also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
If how I handle your information changes, this page changes with it and the date at the top is updated.