Privacy Policy

Effective date: 4 June 2026 Business name: Paris Russell Address: 3 Shire Parade, Worth, Crawley, West Sussex, RH10 7XR Email: consultations@aaron-russell.net Phone: 01293 885882 Website: [WEBSITE URL]

Paris Russell respects your privacy. This policy explains what personal data we collect, how we use it, and your rights under UK data protection law, including UK GDPR and the Data Protection Act 2018.

1. Who we are

Paris Russell is the data controller for the personal data we process. Where we use trusted partners to provide systems and services, they act as data processors on our behalf.

2. The data we collect

• Contact details: name, email, phone number, postal address.
• Booking details: appointment dates and times, services requested, stylist preferences.
• Consultation records: hair history, colour formulas, patch test results, allergies, product preferences, and notes you provide.
• Payment information: transaction amounts, method of payment, and last four digits or token from our payment provider. We do not store full card numbers.
• Communication data: emails, messages via forms or social media, and call notes.
• Marketing preferences: opt in or opt out choices.
• Website and device data: cookies, IP address, pages viewed, and basic analytics.
• CCTV if used in salon: images recorded for safety and security. Signage is displayed where CCTV operates.
• Guest Wi-Fi if offered: device details and connection logs, kept for security.

3. How we use your data and legal bases

• Provide services and manage bookings Confirming appointments, recording colour formulas and patch tests, taking payment. Legal bases: Contract, Legitimate interests, Legal obligation.
• Communicate with you Confirmations, reminders, follow ups, service updates, replies to enquiries. Legal bases: Contract, Legitimate interests.
• Marketing With your consent, we send news, offers and updates. You can withdraw consent at any time. Legal basis: Consent.
• Salon safety and compliance Patch tests, allergy notes, incident logs, CCTV where used. Legal bases: Legitimate interests, Legal obligation, Vital interests in rare emergencies.
• Business operations Reporting, training, fraud prevention, and service improvement, including anonymous statistics. Legal basis: Legitimate interests.
• Website analytics and cookies To keep the site secure and improve content. See our Cookie Notice for details. Legal bases: Consent for non essential cookies, Legitimate interests for essential cookies.

4. Sharing your data

We share data only with trusted providers where needed to run our business. Examples include booking software, payment processors, email and SMS providers, IT support and hosting, marketing platforms with your consent, professional advisers and insurers, and law enforcement or regulators where required by law. We require all processors to keep your data secure and to process it only under our instructions.

5. International transfers

Some providers may process data outside the UK. Where this happens, we use appropriate safeguards, such as adequacy regulations or standard contractual clauses.

6. Data retention

• Booking and service records, up to seven years for tax and insurance.
• Consultation and colour records, usually three to seven years from last visit for continuity of care and insurance.
• Marketing data, until you withdraw consent or we remove inactive records.
• CCTV, usually thirty days unless kept longer for an investigation.
• Website analytics, as set by our analytics provider and the Cookie Notice.

When data is no longer needed, we delete or anonymise it.

7. Your rights

You have the right to access, rectify, erase, restrict or object to processing, and data portability where applicable. You can withdraw consent at any time for marketing or other consent based processing. You can complain to the ICO if you are unhappy with how we handle your data.

To exercise your rights, contact us using the details at the top of this policy.

8. Children

We serve adults and older children with parental consent where required. We only collect children's data where it relates to a booked service and with consent from a parent or guardian.

9. Security

We use reasonable technical and organisational measures to protect your data. These include access controls, encryption in transit where supported, staff training, and regular reviews of our partners.

10. Cookies

Our website uses cookies to operate, to measure performance, and with consent to improve your experience. You can manage preferences through the cookie banner or your browser settings. See our Cookie Notice for details.

11. Social media and messaging

If you contact us via Facebook, Instagram or other platforms, your messages are subject to that platform's privacy terms. We will bring your enquiry into our booking system where needed to manage your request.

12. Third party links

Our website may link to other sites. We are not responsible for their content or privacy practices. Please read their policies.

13. Changes to this policy

We may update this policy from time to time. The most recent version will always appear on our website with the effective date.

Questions or requests Email consultations@aaron-russell.net or write to 3 Shire Parade, Worth, Crawley, West Sussex, RH10 7XR. You can also call 01293 885882. We aim to respond within one working week.