Classics Hair & Beauty Last updated: September 2026
1. Who we are
Classics Hair & Beauty (“we”, “us”, “our”) is a hair and beauty salon based in Kenilworth. This policy explains how we collect, use, and protect your personal information when you visit our website (classicshairandbeauty.co.uk), book an appointment, buy a product from our online shop, or otherwise get in touch with us.
We are the “data controller” for the personal information described in this policy.
Contact details
- Business name: Classics Hair & Beauty
- Address: 1 High Street, Kenilworth, Warwickshire, CV8 1LY
- Email: salon@classicshairandbeauty.co.uk
- Phone: 01926 511246
- Company registration number: 03266105
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. What information we collect
Depending on how you use our website, we may collect:
When you book an appointment
- Name, email address, phone number
- Appointment preferences (service requested, preferred stylist, preferred date/time)
- Any notes you provide relevant to your treatment (e.g. allergies, skin sensitivities, patch test records) where relevant to the service booked
When you buy from our online shop
- Name, billing and delivery address, email address, phone number
- Order history and product preferences
- Payment information — processed directly by our payment provider (see Section 5); we do not store your full card details on our servers
When you contact us
- Name, email address, phone number, and the contents of your message (via our contact/enquiry forms)
Automatically, when you browse our website
- Technical information such as IP address, browser type, device type, and pages visited, collected via cookies and similar technologies (see Section 7)
If you subscribe to marketing communications
- Name and email address, and your marketing preferences
3. How we use your information
We use your personal information to:
- Process and manage your appointment bookings
- Process and fulfil online orders, including payment, delivery, and customer service
- Respond to enquiries and communicate with you about your bookings or orders
- Send you marketing communications, where you have opted in (you can opt out at any time)
- Maintain client records relevant to treatments, including skin/patch test compliance where required for colour, tint, lash, and brow services
- Improve our website and services
- Comply with our legal, accounting, and regulatory obligations
4. Our legal basis for processing
Under UK GDPR, we rely on the following legal bases:
- Contract — to process bookings, orders, and deliver the services or products you’ve requested
- Legitimate interests — to respond to enquiries, maintain treatment records, and improve our services, where this does not override your rights
- Consent — for marketing communications and non-essential cookies, which you can withdraw at any time
- Legal obligation — where we need to keep records for tax, accounting, or health and safety purposes (e.g. patch test records)
5. Sharing your information with third parties
We work with the following third-party services to run our website and business. Each provider only receives the information it needs to perform its function:
- Salon Manager Online (SMO) — our appointment booking system. When you book an appointment, your booking details (name, contact details, service, preferred time) are processed by SMO on our behalf.
- Barclaycard ePDQ (Smartpay) — our online payment gateway. Card payments made through our website are processed securely by Barclaycard; we do not see or store your full card number.
- WooCommerce / WordPress hosting (IONOS) — our website and online shop are built on WordPress with WooCommerce, hosted by IONOS. Order and account data is stored within this hosting environment.
- Clarins — where relevant to Clarins Gold Salon services, limited information may be shared for treatment or loyalty purposes; Clarins products themselves are sold in-salon only, not through our online shop.
- Email and marketing providers — if you subscribe to updates, your email address may be processed by our email marketing platform (e.g. Mailchimp or similar).
- Analytics providers — e.g. Google Analytics, to help us understand website usage (see Section 7).
We do not sell your personal information to third parties. We only share what’s necessary for these providers to deliver their service, and each is required to protect your data appropriately.
6. International transfers
Some of the third parties listed above may store or process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement or adequacy regulations.
7. Cookies
Our website uses cookies and similar technologies to:
- Enable core site functionality (e.g. shopping cart, checkout)
- Understand how visitors use our site (analytics)
- Support the SMO booking widget and any embedded third-party content
- Deliver marketing, where you’ve consented
You can control or disable cookies through your browser settings, and we display a cookie consent banner where required so you can manage your preferences when you first visit.
8. How long we keep your information
We keep personal information only as long as necessary for the purposes it was collected, including to meet legal, accounting, or reporting requirements. For example:
- Booking and treatment records: 6 years
- Order records: 6 years
- Marketing consent: until you unsubscribe or ask us to delete your details
- Enquiry form submissions: 6 years
9. Your rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete your information, in certain circumstances
- Object to or restrict certain processing
- Request that your data be moved to another provider (data portability)
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us using the details in Section 1. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your data properly.
10. Children’s privacy
Our website and services are not directed at children under 13, and we do not knowingly collect personal information from children without appropriate parental consent (for example, in relation to younger clients’ treatments booked by a parent or guardian).
11. Keeping your information secure
We take appropriate technical and organisational measures to protect your personal information, including secure hosting, restricted access to client records, and using reputable third-party providers (SMO, Barclaycard) for booking and payment processing so that sensitive payment data is not stored directly on our systems.
12. Changes to this policy
We may update this privacy policy from time to time, for example if we change service providers or as our online services develop. The “last updated” date at the top of this page will reflect the most recent revision. We encourage you to review this page periodically.
13. Contact us
If you have any questions, concerns, or requests relating to this privacy policy or your personal information, please contact us at:
Classics Hair & Beauty 1 High Street, Kenilworth, Warwickshire, CV8 1LY salon@classicshairandbeauty.co.uk 01926 511246