Clarimore Beautique Privacy Notice
Who we are
Clarimore Beautique, Sheep Street, Charlbury, Oxfordshire, OX7 3RR
The Salon complies with the relevant national data protection regulations. We are committed to keeping personal information accurate, up-to-date, safe, secure and will not keep personal information longer than necessary. This privacy information explains how we use personal information, who we share it with and the ways in which we protect and account for the protections to privacy. This notice applies to all personal data collected for and on behalf of the Salon. This pertains to information collected in analogue (forms, documents, in writing) and through technological means such as information systems and email.
From time to time, we will make you aware when we require additional personal information for processing through a separate specific privacy notice.
How we use personal information
The Salon collects personal information and sensitive categories of personal information of clients and employees to provide a safe environment for the provision of beauty related treatments. We use the information you provide for purposes that are necessary and required to undertake the performance of the booking into which you have entered and do so as we are required to do by law.
We use the information you provide in the following ways:
to undertake and manage the Salon bookings.
to provide beauty treatments.
to protect the health of the clients and staff we serve.
to support and develop our employees in the performance of their duties.
for financial planning to help in the future planning and resource investment purposes.
for meet our statutory reporting requirements.
to help investigate any concerns or complaints you may have.
Why do we collect and use personal information
We collect and use personal information to carry out the beauty treatments as prescribed above. We do so under the lawful basis that the processing is necessary for the performance of a booking in which you are entering or have entered into. In some circumstances we may have to process data for other purposes that are not necessary for the performance of the booking. Where this is the case we will either have legitimate interest to do so, need to as there is a legal requirement, we have your consent, or because it is in the vital interests of the individual for us to process or share information.
Special categories of data
The beauty services we provide require us to collect and process special categories of data for the purpose of the protection of wellbeing of those within our care. We do not disclose or share special categories of data without explicit and unambiguous consent unless we have to do so where we are required to by law, or where we have good reason in protecting the vital interests of an individual, or where not doing so would place someone else at risk.
Participating in salon events
We are keen to ensure all individuals associated with Clarimore Beautique can participate in events and activities that we arrange. To do so we will use the personal information you have provided to make you aware of services, information, news, events and activities that are undertaken at or in association with the Salon and do so under the lawful basis of legitimate interests. We may invite you to sign up for information or to be contacted on other activities such as local events. If at any point you do not wish to receive these updates, you can let us know by contacting the Salon (contact details below).
Right to object to processing
There may be instances where you may not want us to process or share your personal information. In these cases, we may not be able to fulfil the service you need, or do so in a limited way, or be able to comply with a statutory obligation. In those instances, we will not be able to comply with your request and we will tell you if that’s the case.
The information we collect is shared within the Salon for the purposes of delivering the services required. Sharing personal data will take place where we are required to do so by law, or where we have your consent to do so. Your personal information may be shared or processed by a third party processor in the undertaking of a service or contract in the delivery of the beauty services we provide.
Communicating with you
Where we need to contact you we may keep a record of emails, letters and other types of correspondence. Where we need to communicate sensitive or confidential information to you we may use additional and proportionate security measures to do so.
The categories of personal information that we collect, hold and share include:
personal information (such as name, email address, telephone number and address)
special categories of data (such as health)
other relevant categories for the performance of our services (such as patch test results and relevant medical information)
booking information (such as treatments attended)
logging and audit in the use of IT systems, applications and cloud based systems
photographs and videos are taken by staff to record and share everyday life at the Salon. You may be identifiable in these photographs. Unless we have your consent to use these photographs we will not use them for marketing purposes.
Collecting information and Consent
Whilst the majority of information you provide to us is required for the performance of a booking or by law, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you when we require consent to process the information. Where consent is provided you are free to withdraw consent at anytime. You can contact the Salon (contact details below) if you wish to withdraw consent.
Storing personal data
We keep personal data for 7 years since an individual's last booking, to comply with insurance requirements.
Whilst we store and use your personal data we will ensure the appropriate security of your personal data including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Who do we share information with?
Example of who we may share data with:
Social Media such as Facebook, Instagram.
providers of information systems that are necessary for Salon to manage bookings.
Personal information will only be shared if there is a lawful basis to do so.
Transfers to Third Countries
Personal information is transferred to organisations outside the UK and outside the EU for the purposes of communications, marketing and bookings. Information on these and the protections afforded by these data processors can be requested from the Salon.
All the personal data we process is processed by the Salon. For the purposes of IT hosting and maintenance this information is located on servers within the Salon or within hosted servers provided by our service providers. No 3rd parties have access to your personal data unless the law allows them to do so. Where the law allows and information is shared with 3rd parties, we ensure they have the same protections in place as we do. We cannot deliver our services without processing the data we collect and share.
In following the principles of Article 32 - Security of Processing of the GDPR, we have in place proportionate organisational and technical measures to protect. More information on these can be requested via the Salon (contact details below).
Requesting access to your personal data
Under data protection legislation you have the right to request access to information about you, that we hold. To make a request for your personal information, contact the Salon (contact details below)..
You also have certain additional the rights to:
be informed of how we are processing your personal information – this Privacy Notice serves to explain this you but do get in touch if you have any questions;
have your data corrected if it is inaccurate or incomplete;
have your information erased (the right to be forgotten) in certain circumstances – e.g. where it is no longer needed by us the purpose for which it was collected or you have withdrawn your consent;
restrict the use of your data in certain circumstances e.g. where you have told us the data is inaccurate and we are in the process of checking this. In such circumstances we will continue to store your data but will not process it further until we have checked and confirmed whether the data is inaccurate;
to object to the processing of your data in certain circumstances - e.g. you may object to processing of your data for direct marketing purposes.
to object to decisions being taken by automated means.
object to processing of personal data that is likely to cause, or is causing, damage or distress
prevent processing for the purpose of direct marketing
object to decisions being taken by automated means
in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
claim compensation for damages caused by a breach of the Data Protection regulations
If you have any concerns about the way we are collecting or using your personal data, you should raise your concern with us in the first instance.
You can also directly contact the Supervisory Authority in the UK which is:
Information Commissioner's Office
If you would like to discuss anything in this privacy notice, please contact:
Telephone: 01608 238200