Sam's Beauty Lodge Privacy Policy

Introduction - Our Commitment to You

Privacy and protection of your personal data is important to us and we are committed to ensure you are fully informed about your rights and how we use your data. Our Privacy Notice will tell you how we collect and use your data to improve your experience with us. We’ll make sure we collect and store your data securely and only retain it for as long as we need to. You will always be in control of the way we use your data and communicate with you, and should you wish to make a change you will easily be able to do so in store, via your online account or by emailing us at info@samsbeautylodge.com

Who we are

For the purposes of the General Data Protection Regulation (GDPR), the data controller is Sam’s Beauty Lodge (also referred to on the website as SBL). Sam’s Beauty Lodge is wholly owned and run by Samantha Bradbury.

Information we collect, why we collect, and the benefit to you.

There are a number of different permitted basis which allows a company to collect and process your personal data, including:

• Consent - In specific situations, we can collect and process your data with your consent.  For example, if you opt to receive marketing information from us via email/SMS.
• Contractual obligations - In certain circumstances, we need your personal data to      comply with our contractual obligations. For example, for you to received treatment      from SBL we must ask you questions about existing conditions, allergies,   contraindications etc.
• Legal compliance - We may need to collect and process your data if we have a legal obligation.  For example, we can pass on details of people involved in fraud or other      criminal activity affecting Sam’s Beauty Lodge to law enforcement authorities or to external advisers.
• Legitimate interest - In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running      our business and which does not materially impact your rights, freedom or interests. For example, when you book only online with us, we may monitor your booking preferences so when you return to our site we can identify you and offer you suggestions based on your browsing history.

We collect information from and about you at various times and in different ways to help us provide you with the best possible service based on our overall understanding of you, as well as to meet our obligations under the law. We use your data to:

• communicate with you and manage our relationship with you
• personalise and improve your experience
• inform you of latest trends, products, services and promotions that you may like
• improve our services, fulfil our administrative purposes, comply with our legal obligations and protect our business

You are able to change how we use your data, you’ll find details in the ‘Your Rights?’ section below.

Sharing your data, why we need to share, and the benefit to our customers.

There may be occasions where we need to share your data. We will only do this in extreme circumstances, examples of the entities we may share your data with are:

• Legal and enforcement bodies where we have a legal obligation or when it is necessary to protect us both.
• Our external professional advisers and insurers.
• Medical professionals should the need arise following or during a treatment at SBL

How long we keep your personal information

We will only keep your personal information for so long as it is necessary for the purpose for which is was collected and for us to fulfil our contractual and legal obligations. We maintain retention records of how long information containing personal data will be retained for.

At the end of the respective retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.

Your rights

You have certain rights to control your information and the manner in which we process it. This includes:

• A right to request us to correct inaccurate information, or update incomplete information; Please speak to Samantha Bradbury who will be happy to amend/alter this for you.
• A right to withdraw your consent where you have given us your consent to process your data;
• A right to object to our use of your information (where we rely on our legitimate interests to use your personal information) provided we do not have any continuing      lawful reason to continue to use and process your information. When we do rely on our legitimate interests to use your personal information for direct marketing, we will always comply with your right to object;
• A right to object to us processing your information for direct marketing purposes, including profiling you for the purposes of direct marketing;
• You can withdraw any consent that you have previously given to us at any time in writing to info@samsbeautylodge.com
• A right to ask that your information is erased (or restricted), provided we do not have any continuing lawful reason to continue to use and process your information;
• A right to get access to your personal information

To make such a request please write to, Samantha Bradbury, 21 Augustus Drive, Basingstoke, Hampshire, RG23 8HU or email info@samsbeautylodge.com. If we choose not to action your request we will explain to you the reasons for our refusal. To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice, and, where applicable, further information to help us search for your personal information, where a specific request is received. If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to make the request.

We will respond to your request within 1 month of us verifying your identity.