Privacy policy

Last updated: 13 October 2026

This policy explains what personal information Brid's Hair & Holistic collects through this website, why we collect it, how long we keep it and the choices you have. We have tried to keep it short and in plain English.

Who we are

This website is run by Hair and Holistic Ltd, trading as Brid's Hair & Holistic, a company registered in England and Wales (company number 16409233) with its registered office at Lodges Wood Oast, Goodley Stock Road, Westerham, Kent TN16 1TW. Our salon is at 62 Croydon Road, West Wickham BR4 9HU. We are the "controller" of the personal information described here.

We are registered with the Information Commissioner's Office (ICO) under registration number [ICO registration number].

If you have any questions about this policy or your information, email us at bridshandh@outlook.com, call us on 020 8149 8761 or write to us at our salon address above.

What we collect and why

When you send us a message

Our contact form asks for your name, email address, phone number (optional) and your message. We also record the page you sent it from, the date and time, your IP address and your browser type, which helps us spot spam and misuse.

We use this to reply to you and deal with your enquiry. Our lawful basis is our legitimate interest in answering the people who contact us, or taking steps at your request before you book with us.

When you sign up for news and offers

If you sign up to hear from us, we keep your email address, the page you signed up on, the date and your IP address.

We use it to send you occasional emails about the salon, new treatments and offers. Our lawful basis is your consent. You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us, and we will stop straight away.

When you buy a gift card

Our gift cards are sold through Fresha. When you press "Buy a gift card" you go to Fresha's website, and anything you enter there - your name, contact and payment details, and the recipient's details - is collected by Fresha under Fresha's privacy policy. Fresha takes the payment and emails the gift card. We receive the details we need to honour the card in the salon (such as the card, its value and balance, and who bought it), and use them to check balances when it is used and to deal with any questions. Our lawful basis is the contract between us, plus our legal obligation to keep financial records.

Booking an appointment

Our "Book now" buttons take you to our online booking partners, Treatwell and Fresha. Treatwell's booking window opens on top of our website but is provided by Treatwell; Fresha opens on its own website. Anything you enter there (including your name, contact details and appointment details) is collected by Treatwell or Fresha under their own privacy policies - please read Treatwell's privacy policy and Fresha's privacy policy. They share your booking with us so that we can look after your appointment.

Keeping the website safe

To stop spam and abuse, our forms briefly record the IP address that submitted them and how many times. Like all websites, our hosting provider also keeps standard server logs (such as IP address, the page requested and the date and time) for security and to keep the site running. Our lawful basis is our legitimate interest in keeping the website secure.

Cookies and similar technologies

We do not use advertising or analytics cookies, and we do not track you across other websites.

• Staff login cookie - our admin area uses a strictly necessary session cookie when salon staff log in. Visitors to the public website do not get it.
• Treatwell - when you press "Book now", Treatwell's booking window is loaded from Treatwell and may set its own cookies, as described in its cookie policy.
• Fresha - our Fresha booking and gift card pages are on Fresha's own website and use its cookies, as described in its cookie policy.
• Google Fonts - our typefaces are loaded from Google Fonts, so your browser sends your IP address to Google when the page loads. Google says it does not use this to build profiles or for advertising.

If we ever add analytics, we will ask for your permission first and update this policy.

Who we share your information with

We never sell your personal information. We only share it with service providers who help us run the website and the salon, and only as much as they need:

• Resend - delivers our website emails (such as contact form messages and replies)
• GoDaddy - our web host, which hosts this website and its database
• Treatwell and Fresha - online booking, and Fresha for gift cards (see above)
• our accountants, professional advisers, HMRC or other authorities where the law requires it

Some of these providers (for example Resend, GoDaddy, Fresha and Google) are based in, or use servers in, the United States. Where your information is transferred outside the UK, it is protected by UK adequacy regulations (such as the UK Extension to the EU-US Data Privacy Framework) or the UK's International Data Transfer Agreement / Addendum.

How long we keep it

• Contact form messages - [2 years] from your last contact, then deleted
• News and offers sign-ups - until you unsubscribe (we keep a note of your email address after you unsubscribe only so we don't email you again)
• Gift card and payment records - 6 years after the end of the financial year they relate to, as required for tax and accounting
• Spam protection records - a short time only (they are overwritten within about an hour)
• Server logs - as set by our hosting provider, usually no more than a few months

How we protect it

The website uses an encrypted (HTTPS) connection, our admin area is password protected and only the people who need it can see your information. We do not take card payments on this website - gift card payments are handled entirely by Fresha.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information
• ask us to restrict how we use it, or object to us using it (including for marketing at any time)
• ask for information you gave us to be transferred to you or another organisation
• withdraw your consent at any time, where we rely on it

To use any of these rights, contact us at bridshandh@outlook.com or call 020 8149 8761. We will reply within one month. There is normally no charge.

Complaints

If you are unhappy with how we have handled your information, please talk to us first and we will do our best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this policy

We may update this policy from time to time, for example if we change how the website works. The latest version will always be on this page, with the date it was last updated at the top.