
PRIVACY POLICY
Last updated: 6 April 2025
Business name: Hair 2 The Throne (“H2TT”, “we”, “us”)
Jurisdiction: United Kingdom – UK GDPR & Data Protection Act 2018
This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with Hair 2 The Throne, including when you:
-
Visit our website
-
Book services
-
Purchase goods
-
Enrol in training or coaching
-
Access digital products
-
Use our online platforms, forms, or portals
-
Communicate with us
We are committed to protecting your privacy and handling your data lawfully, fairly, and transparently.
1) Who We Are
Hair 2 The Throne (“H2TT”) is the data controller responsible for your personal data.
You can contact us regarding data protection at:
Email: hello@hair2thethrone.co.uk
2) What Data We Collect
We may collect and process the following types of personal data:
Identity & Contact Data
-
Name
-
Email address
-
Phone number
-
Billing and delivery address
Booking & Account Data
-
Appointment details
-
Course enrolments
-
Purchase history
-
Communication records
Consultation & Health Data
-
Hair and scalp history
-
Patch test records
-
Allergies, sensitivities, and contraindications
This is classed as special category data and is processed only with your explicit consent and for safety purposes.
Technical & Usage Data
-
IP address
-
Browser type
-
Device information
-
Pages visited
-
Cookies and analytics data
Marketing Preferences
-
Email subscription status
-
Content interests
-
Interaction with campaigns
3) How We Collect Your Data
We collect data when you:
-
Complete forms on our website (Wix)
-
Book appointments
-
Purchase products or courses
-
Subscribe to our mailing list
-
Contact us by email, DM, or form
-
Participate in training, coaching, or communities
-
Use our digital platforms and portals
We also collect limited technical data automatically via cookies and analytics tools.
4) How We Use Your Data
We use your data to:
-
Provide services and products
-
Manage bookings, orders, and enrolments
-
Deliver training, coaching, and digital content
-
Maintain safety (consultations and patch tests)
-
Communicate with you
-
Process payments
-
Improve our services and website
-
Send marketing (where consent is given)
-
Meet legal, tax, and insurance obligations
We will never sell your personal data.
5) Lawful Bases for Processing
We process your data under the following lawful bases:
-
Contract – to provide services, goods, and training
-
Consent – for marketing and health-related data
-
Legal obligation – for tax, accounting, and insurance
-
Legitimate interests – business operations, customer service, fraud prevention
You can withdraw consent at any time.
6) Special Category Data (Health Information)
Health and consultation data is processed:
-
Only for service safety
-
With your explicit consent
-
Stored securely
-
Accessed only when necessary
You may withdraw consent, but this may prevent us from providing certain services.
7) Marketing Communications
We may send you emails about:
-
Appointments
-
Products or services
-
Training and coaching
-
Offers and updates
You can unsubscribe at any time via the link in our emails or by contacting us.
We do not send spam.
8) Sharing Your Data
We only share data with trusted service providers where necessary, including:
-
Payment processors
-
Booking systems
-
Email marketing platforms
-
Learning platforms
-
Website hosting (Wix)
-
Accountants and insurers
All third parties are required to handle your data securely and lawfully.
We do not share your data for third-party marketing.
9) International Transfers
Some of our service providers may store data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as UK-approved data transfer mechanisms).
10) Data Retention
We retain personal data only for as long as necessary:
-
Booking and purchase records: up to 6 years
-
Consultation and patch-test records: as required for safety and insurance
-
Marketing data: until you unsubscribe
-
Training records: for certification and reference
Data is securely deleted when no longer needed.
11) Your Rights
Under UK GDPR, you have the right to:
-
Access your data
-
Correct inaccurate data
-
Request deletion
-
Restrict processing
-
Object to processing
-
Data portability
-
Withdraw consent
-
Lodge a complaint with the ICO
You can exercise your rights by emailing:
hello@hair2thethrone.co.uk
You also have the right to complain to the Information Commissioner’s Office (ICO):
www.ico.org.uk
12) Cookies & Analytics
We use cookies to:
-
Ensure site functionality
-
Improve user experience
-
Analyse traffic
You can manage cookies through your browser settings or via our cookie banner.
13) Data Security
We use appropriate technical and organisational measures to protect your data, including:
-
Secure platforms (e.g. Wix)
-
Password protection
-
Limited access controls
-
Encrypted services where available
Despite our efforts, no system is 100% secure. You use our services at your own risk.
14) Third-Party Links
Our website may contain links to third-party sites. We are not responsible for their privacy practices.
15) Changes to This Policy
We may update this Privacy Policy at any time.
The version published on our website is the one in force.