Privacy Policy

Personal data is any information by which an individual person can be identified. This includes a name, an identification number, address, email address, IP address, photo, date of birth, phone number and images captured by our CCTV cameras. This covers any factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of a person.

Processing includes collection, recording, organising, storage, adapting, retrieval, use, erasure or destruction.

We are committed to keeping your information securely and with respect.

For any information please contact us.

What Information do we collect?

We only collect information when we need it to provide our services, to promote our services, to maintain our accounts and records and comply with UK law.

​

For general enquiries by phone or email

• We will have your name, email and telephone number and the nature of your query and our reply.

​​

For individual bookings at Rasa Beauty

• We will have your name, address email, telephone number and whatever further information necessary for the safe and successful provision of our services. Further information will also be obtained throughout until the service is concluded and will be kept in our records.

​​

For any feedback form

• We will have your name, telephone number and email and the comments provided.

​​

We may ask for written consent to receive marketing materials from us that we believe would be of interest to you.

We also process personal information about our suppliers, employees, independent contractors, advisers and other professional experts.

We sometimes process sensitive classes of, including medical details, for which we will request specific consent from the individual.

Who will we share your data with?

We sometimes need to share personal information with other organisations that we work with or who provide services on our behalf. When sharing information we will comply with all aspects of current data protection law.

​

Where necessary or required we share information with

• Business associates and other professional advisers

• Financial organisations

• Current, past or prospective employers and employees

• Official bodies

• Suppliers and services providers.

We never share personal information with any other organisation for third party marketing purposes.

Third Parties will also have access to some of your information through your use of our website on a limited basis. These will include Google Analytics and any booking software.

The Legal Basis for the Processing

The legal basis for processing shall be:

• The individual has given consent to the processing of their personal information.

• The processing is necessary for the performance of a contract to provide a service which the individual is a party or in order to take steps at the request of the individual prior to entering into a contract.

• Processing is necessary to comply with our legal obligations.

• Processing is necessary for our legitimate interests or those of a third party except where overridden by the interests of the individual especially where a child is involved.

Consent and Children

Before any information is collected for a child we will need to obtain the consent from a person holding parental responsibility. A child is a person under 16 years of age.

Sensitive Data

• It is necessary to collect basic medical data from all customers to the Salons in order to provide any services

• It may be necessary to collect more detailed medical data if the Customer has mental or physical health issues.

• Medical data is classed as Sensitive Data which also includes data about racial or ethnic origin, religious or philosophical beliefs

• We cannot collect any Sensitive Data without the explicit consent of the individual unless there is an overriding legal or other obligation as provided in Article 9 of GDPR

• The individual will be requested to supply their consent in writing before any Services are provided. This consent can be withdrawn at any time

• If no consent is in place no services can be provided.

CCTV

The image of the customer may be collected outside at Rasa Beauty. This is provided for the security and safety of our customers as part of our service to them. The customer will be giving their consent to this when they sign the registration card.

Consent can be withdrawn but then we can no longer provide any services and the customer must not enter the salon premises.

Visible and readable signs on the premises will inform the customer that they are being recorded. 

CCTV will not be used except in exceptional circumstances in locations where the customer could expect privacy.

The CCTV images are subject to the same rules as all other Data and the Customer has the same rights.

The CCTV images will only be kept for as long as necessary to meet the purpose of recording them.

Security of Processing

We are implementing organisational measures to ensure personal information processed remains secure but absolute security cannot be guaranteed.

How long will we keep your data?

Personal data is retained only as long as necessary to comply with statutory retention periods. At the end of those periods the data will be securely deleted provided it is no longer required to fulfil the contract or any legal proceedings.

Failure to provide data

Sometimes the provision of personal data by an individual is required by law or failure to provide can result in us being unable to provide the service agreed. If an individual should fail to supply such information we shall not be liable for the consequences of being unable to complete any contract for services.

Your rights

We are committed to upholding your rights in respect of your personal data.

• Right of Access

You have a right to ask us what personal information we hold about you and to request a free copy of your information. This is known as a Subject Access Request (SAR). SARs need to be in writing and we ask it is accompanied by proof of your identity and address.

If you want specific information e.g. a particular time frame please clarify this in your written confirmation of consent.

If someone is requesting information on your behalf we shall need your written consent and evidence of ID for both of you.

We have to comply you with the information you request within 30 days although we will endeavour to do so as soon as possible.

• Right to Rectification

You can ask us to rectify your personal data if it is inaccurate or incomplete. Please assist us by informing us of any obvious changes.

• Right to erasure

This is known as the ‘right to be forgotten’. In some circumstances you can ask for your data to be deleted or removed. However we will need to consider each case on its circumstances and it may be that we are obliged to retain the data under our legal and other obligations.

• Right to Withdraw Consent

Where consent forms the basis of processing you have the right to withdraw that consent at any time.

Complaints

In the first instance please send any complaints to management at Rasa Beauty. If you are not satisfied with the response then you should contact the Information Commissioner.

General

You may not transfer any of you rights under this Privacy Notice to any other person. We may transfer our rights where we reasonably believe your rights will not be affected.

This notice will be governed by the laws of England.

This Notice will be updated from time to time and a copy of the latest version will be on our website.