• Find Us On:
  • Facebook
  • Google
  • Twitter
  • Youtube
  • Pinterest
  • Pinterest

Monthly Archives: April 2018

24 
Apr

GDPR – Data Protection

GDPR – Data Protection

Privacy Policy

Background:

The Grove Experience understands that your privacy is important to you and that you care about how your personal data is used and shared. We respect and value the privacy of everyone who visits our salon or website, www.groveexperience.co.uk and will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law.

Please read this privacy policy carefully and ensure that you understand it. Any questions can be sent to info@groveexperience.co.uk and we will try to clarify any points for you. your acceptance of the privacy policy is deemed to occur upon your first visit to the website or salon. If you do not accept and agree with this privacy policy, you must stop using our services.

Areas covered by this policy:

Emails and texts to guests

information stored about you (on paper or computer)

CCTV monitoring of the salon

employment C.Vs

Details of team members past & present.

online booking of appointments.

Salon WiFi log in information.

Information on Guests aged under 16 years

access to your information.

removal of information.

2) Information about us:

Our salon and website, App and online booking system are owned and operated by The Grove Experience, part of Experience Hair design a partnership solely owned by Mr & Mrs G Young. 64 Grove Road, Little Chelsea, Eastbourne, East Sussex, BN21 4UH.

2.2) Our Vat number is : 990115623

2.3) Our data protection officer is Gary Young and can be contacted by email at gary@groveexperience.co.uk or in righting at the above address.

3) Your Rights:

As a guest to our business, you have the following rights under the new General Data Protection regulations (GDPR), which this policy and our use of personal data have been designed to uphold.

3.1) The right to be informed about our collection and use of personal data;

3.2) The right to actress your personal data that we hold about you.

3.3) The right to rectification if any personal data we hold about you is inaccurate or incomplete. (please contact Reservations to update your details).

3.4) The right to be forgotten, i.e the right to ask us to remove your personal data that we hold about you. (we only hold your personal data for a limited time, as explained in section 5 but if you would like it removed sooner, please contact us using the details in section 14.

3.5) The right to restrict (ie prevent) the processing of your personal data;

3.6) The right to data portability, (obtaining a copy of your data to re-use with another service or organisation.

3.7) the right to object to us using your personal data for particular purposes.

3.8) rights with respect to automated decision making and profiling.

4) What data do we collect?

Depending upon your use of our business or services, we may some or all of the following personal and non-personal data.

4.1) Name,

4.2) contact information such as phone numbers & email addresses,

4.3) Demographic information such as postcode, address, preferences and interests.

4.4) Technical data: hair colour, perm, skin-test results, medical information.

4.5) payment information, deposits, account payments, card details

4.6) CCTV images

4.7) Reviews or testimonials.

4.8) Appointment date, time, online booking profile & passwords.

We do not use any form of Cookies, we do not store IP address or browser history.

5) How do we use your data?

All personal data is processed and stored securely, for no longer than is necessary in light of the reasons for which it was first collected. We will comply with our obligations and safeguard your rights under GDPR at all times.

5.1) Our use of your data will always have a lawful basis, either because it is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate interests. specifically, we may use your data for the following purposes:

5.1.1) Providing and managing access to our website or App.

5.1.2) Personalising and tailoring your experience with us.

5.1.3) Supplying our products and services to you.

5.1.4) granting you access to our online booking service.

5.1.5) granting your access to our home shopping service.

5.1.6) replying to emails and messages from you.

5.1.7) Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time)

5.1.8) Market research for the salon.

5.1.9) CCTV images form your and the team security (stored 7 days)

5.1.10) granting you access to the salon’s WiFi (conforming to anti copy-rite laws with the EU)

5.1.11) storing skin test data to conform with current Health & Safety legislation.

PLEASE NOTE WE NEVER SELL, SHARE, OR GIVE ACCESS TO YOUR DATA TO ANYONE NOT CURRENTLY EMPLOYED BY EXPERIENCE HAIR DESIGN.

5.2) With your permission and/or where permitted by law, we may also use your data for marketing purposes which may include contacting you by email and telephone and text message and post with information, news and offers on our products and services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that we fully protect your rights and comply with our obligations under the GDPR and the privacy and electronic communications regulations 2003.

5.3) You have the right to withdraw your consent to us using your personal data at any time and to request that we delete it.

5.4) We do not keep your personal data for any longer than is necessary in light of the reason for which it was first collected.

6) How and where do we store your data?

We only keep your personal data for as long as we need to in order to use it as described above in section 5 and or for as long as we have your permission to keep it.

6.1) Your data will only be stored in the UK by us on our secure systems.

6.2) Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure data collected by us.

7) Do we share your data?

NO we do not share your Data with anyone not CURRENTLY employed or contracted by us for any purposes.

7.1) In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal obligations, a court order, or a governmental authority.

8) What happens if our business changes hands?

We may expand or reduce our business and this may involve the sale and or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by us.

8.1) in the event that any of your data is to be transferred in such a manner, you will be contacted in advance and be informed of the changes.

9) How can you control your Data?

When you submit personal data, you may be given options to restrict our use of your data. In particular, we aim to give you strong controls on our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from us which you may do by unsubscribing using the links provided in our emails and at the point of providing your details.

9.1)You may also wish to sign up to one or more of the preference services operating in the Uk: The Telephone preference service, The corporate telephone preference service and the mailing preference service. These may help to prevent you receiving unsolicited marketing. please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receive.

10) Your Right to withhold information.

You may still access our website and a limited number of our services without providing any data at all.

10.1) the following services do require your data either for security or for health & Safety.

Online Booking, Home shopping, Colour services, Colour correction.

11) How can you access your data?

You have the right to ask for a copy of any personal data held by us. Under GDPR, no fee is payable, and we provide any and all information in response to your request free of charge. Please contact us for more details.

12) Use of Cookies.

We do not use or place any form of cookies from our website or mobile app.

13) CCTV.

all the public areas of our salon our covered by our own CCTV system, this is for the protection of our guests and team. data is kept on the system for a limited period and then written over. We can and will share this data when requested to do so by a legal authority like the police.

14) Online booking.

The salons online booking system is developed and supplied by millennium software linked to the salon EPOs system all data used to access and use this service is stored securely by us on a secure server with software protection and firewall in place.

15) Online home shopping.

This service is developed and managed by Salon Success limited all data added by you to use this service is held and managed by them and is securely held by them and falls under their Data protection policy. The only data shared by us with them is to confirm that you are a guest of the salon and are eligible to use the service.

16) Salon WIFI service.

We offer free wifi access to all slot guests at our expense. to access this you must log-in to the system imputing your own data which is held securely on the system with full safeguards and firewall in place. this will ensure that we also comply with copy rite laws relating to data that you download through our Wifi on to your devices. You are completely liable for any data you download.

17) Skin test data.

To comply with current health & safety legislation we are required to skin test and store the results of the skin test for all guests wishing to receive a colour service in the salon. this data must not be more than 6 months old. Data stored is Name, Date and contact number.

If you request that this data is not held by us then we will be unable to complete any technical services for your self.

18) Storage of young person’s Data.

We will not require anyone under the age of 16 years old to supply any Data to the salon. Data can be given by a legal parent or guardian, the minimum amount of data will be taken and stored and only so far as it is required to book appointments or use services of the salon. Skin test data is not required as colour services cannot be completed on people under the age of 16 years old.

19) Contacting us.

If you have any questions about own business or this privacy policy, please contact us by email at info@groveexperience.co.uk, by telephone 01323411852 or by post at The Grove Experience 64 Grove Road, Little Chelsea, Eastbourne, East Sussex, BN21 4UH.

20) Changes to our Privacy Policy.

We may change this privacy policy from time to time (if the law changes). Any changes will be immediately posted on our website and you will be dammed to have accepted the terms of the privacy policy on the first use of our services following the alterations. We recommend that you check this page regularly to keep up-to-date.

Readmore..

Published Date: 24th April 2018
Category: General, Salon Services
Tags: , , , , , ,