Privacy policy
What we hold, why we hold it, and how to get it corrected or deleted. Written to be read.
DRAFT — awaiting review. Not yet in force.
Who we are
Hair & Beauty United Kingdom ("we") operates hairandbeauty.io, a directory of beauty and aesthetics businesses. For data protection purposes we are the controller of the information described here. Contact: hello@hairandbeauty.io.
What we collect, and why
Members. Business name, contact name, email address, phone number, town and postcode area, treatments, prices, photos and business description — supplied by you to publish your listing (performance of our contract with you). They are never published.
Enquirers. If you use the listing enquiry form we hold the details you give us to respond and to operate the waiting list (legitimate interest).
Visitors. We do not run advertising or analytics cookies. Signing in uses one strictly-necessary cookie to keep you signed in. Page views are counted with Vercel Web Analytics, which sets no cookie and stores no identifier.
Businesses we list from public sources. Some listings were compiled by us from information the business already publishes: its name, address, phone number, website, opening hours and its Google rating. We do this so that the directory is useful from day one, on the basis of our legitimate interest in running a complete directory and the business's own interest in being found. Each such listing is marked as compiled, carries a link the business can use to claim it or have it removed, and is removed on request without question. We do not hold personal data about individuals from these sources beyond a name where the business trades under one.
Counting views and clicks. When you view a listing or tap its phone, email or website link we record that it happened, so the business can see how many people it reached. We never store your IP address: it is hashed together with your browser type, a secret and the date, and then shortened, so the result cannot identify you and changes every day. No cookie or identifier is written to your browser. Because nothing follows you between days or sites, this is not tracking in the sense that needs your consent, and there is no banner.
Where it lives
Data is stored with our hosting and database providers (Vercel; Neon, EU region) and our email provider (Resend, EU region) under their standard data-processing terms. Photos you choose to publish are served from a public content network.
How long we keep it
Listing data: while your membership is active, then removed from the public site. Enquiries: up to 12 months.
Your rights
You can access, correct or delete your information — most of it directly from your dashboard, or by emailing us. You can complain to the ICO (ico.org.uk) if you think we have handled your data badly.