Privacy Policy

Last updated: 25 February 2026 This Privacy Policy explains how Red Hair (“we”, “us”, “our”) collects and uses personal data when you use redhair-online.co.uk (the “Website”), contact us, or make a booking via our third-party booking provider. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Who we are

Controller: Red Hair Website: redhair-online.co.uk Privacy contact: accounts@redhair-online.co.uk If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

2. Personal data we collect

We collect the following personal data: First name Last name Email address We do not intentionally collect special category data (such as health data) through our Website.

3. How we collect your personal data

We collect personal data in the following ways: When you submit information via our contact forms on the Website. When you make or manage a booking via our third-party booking system: GetSlick (book.getslick.com).

4. Why we use your personal data

We use your personal data to: Respond to enquiries submitted via our contact forms. Manage bookings, including confirmations and related communication needed to provide the booking service.

5. Our lawful bases for processing

Under UK GDPR, we must have a lawful basis to process your personal data. We rely on: Legitimate interests — to respond to enquiries and communicate with you about your request. Performance of a contract (or steps taken at your request before entering into a contract) — to manage and administer bookings. Where required by law (for example, for certain non-essential cookies/analytics), we will rely on consent.

6. Who we share your personal data with

We do not sell your personal data. We share personal data only as necessary to operate our services, including: GetSlick (book.getslick.com) — our third-party booking system used to take and manage bookings. We may also share personal data if required to comply with a legal obligation, enforce our rights, or protect the rights, property, or safety of our users or others.

7. International data transfers

Some service providers may process data outside the UK. Where personal data is transferred internationally, we will ensure appropriate safeguards are in place (for example, the UK International Data Transfer Agreement, the UK Addendum to EU SCCs, or other lawful transfer mechanisms), as required by UK GDPR.

8. How long we keep your personal data

We keep personal data for the duration of the customer relationship. We may retain certain records for longer where needed to meet legal, accounting, or regulatory requirements, or to resolve disputes and enforce agreements.

9. Your data protection rights (UK)

You have rights under UK GDPR, including: Right of access — request a copy of the personal data we hold about you. Right to rectification — ask us to correct inaccurate or incomplete data. Right to erasure — ask us to delete your personal data in certain situations. Right to restrict processing — ask us to limit how we use your data in certain situations. Right to object — object to processing based on legitimate interests, and to direct marketing. Right to data portability — receive your data in a structured, commonly used format in certain cases. Right to withdraw consent — where we rely on consent (this won’t affect processing already carried out). To exercise your rights, contact: accounts@redhair-online.co.uk .

10. Complaints

If you have concerns, please contact us first and we’ll try to resolve it. You also have the right to complain to the UK data protection authority: Information Commissioner’s Office (ICO)

11. Cookies and analytics

Cookies are small text files stored on your device when you visit a website. We use: Strictly necessary cookies These cookies are required for the Website to function properly (for example, enabling basic site features and security). Because they are essential, they do not require consent. Analytics cookies (Google Analytics) We may use Google Analytics to understand how visitors use our Website (e.g., pages visited, time on site). Although it is not actively used currently, Google Analytics scripts/cookies may still be present depending on site configuration. Where analytics cookies are used, we will request your consent via a cookie banner or settings tool before placing them (unless a valid exemption applies). Managing cookies You can control cookies through your browser settings. You can delete cookies and block future cookies, but some parts of the Website may not function properly if you disable strictly necessary cookies.

12. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on our Website and update the “Last updated” date above.