Privacy Policy

Introduction

Glistain Scrub respects your privacy and is committed to protecting any personal information you share with us. This policy explains how we collect, use, store, and safeguard your data when you interact with our website or engage our services.

We operate in accordance with UK data protection legislation, including the Data Protection Act 2018 and UK GDPR. By using our website or services, you acknowledge the practices described in this policy.

Information We Collect

Information You Provide Directly

When you contact us for services, we collect details you voluntarily provide, such as your name, email address, postal address, and information about your styling needs and preferences. During consultations, we may record additional details about your wardrobe, style preferences, body measurements, and personal goals to deliver appropriate advice.

Automatically Collected Information

When you visit our website, we automatically gather certain technical data through cookies and similar technologies. This includes your IP address, browser type, device information, pages visited, time spent on pages, and referring website. This information helps us understand how visitors use our site and identify areas for improvement.

Payment Information

Financial details necessary for processing service payments are collected securely. We do not store complete payment card information on our systems. Payment processing is handled by trusted third-party providers who maintain compliance with payment industry standards.

How We Use Your Information

Personal information collected serves specific purposes related to delivering and improving our services:

• Providing styling consultations, wardrobe audits, and other professional services you've requested
• Communicating with you about appointments, service delivery, and follow-up support
• Processing payments and maintaining financial records as required by law
• Improving our website functionality and user experience based on usage patterns
• Sending relevant service information or updates when you've expressed interest
• Complying with legal obligations and protecting our legitimate business interests
• Responding to enquiries and addressing concerns or complaints

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Legal Basis for Processing

Under UK GDPR, we process personal data based on the following lawful grounds:

• Contract Performance: Processing necessary to deliver services you've engaged us to provide
• Legitimate Interests: Pursuing business activities such as improving services, preventing fraud, and maintaining security, balanced against your rights and interests
• Legal Obligation: Complying with financial record-keeping, tax reporting, and other statutory requirements
• Consent: Where you've explicitly agreed to specific processing activities, such as receiving newsletters or marketing communications

Data Sharing and Disclosure

We limit data sharing to circumstances necessary for service delivery and legal compliance. Your information may be shared with:

• Service Providers: Trusted third parties who assist with website hosting, email communications, payment processing, and scheduling tools. These providers access data only as needed to perform their functions and are contractually bound to protect it.
• Professional Advisers: Accountants, lawyers, and consultants who require access to information in the course of providing professional services to us.
• Legal Authorities: Law enforcement, regulatory bodies, or courts when required by law or to protect rights, safety, or property.

We do not share client information for marketing purposes or with parties unrelated to service delivery without explicit permission.

Data Security

Protecting your personal information is a priority. We implement appropriate technical and organisational measures to prevent unauthorised access, disclosure, alteration, or destruction of data. These measures include:

• Secure data transmission using encryption protocols
• Access controls limiting data availability to authorised personnel only
• Regular security assessments and updates to address emerging threats
• Staff training on data protection responsibilities and best practices

Whilst we take reasonable precautions, no internet transmission or electronic storage system is completely secure. We cannot guarantee absolute security but continually work to minimise risks.

Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law. Retention periods vary depending on the nature of the information and legal requirements:

• Client service records are kept for seven years following the last interaction, supporting continuity of care and meeting accounting obligations
• Marketing communications data is retained until you withdraw consent or we determine it's no longer relevant
• Website analytics data is typically retained for two years
• Financial records are maintained according to UK tax and accounting regulations

Once retention periods expire, we securely delete or anonymise personal data.

Your Rights

Under UK data protection law, you have several rights regarding your personal information:

• Access: Request copies of personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete information
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Ask us to limit processing of your information temporarily or permanently
• Objection: Oppose processing based on legitimate interests or for direct marketing purposes
• Portability: Receive your data in a structured, machine-readable format or request transfer to another controller
• Withdraw Consent: Revoke consent previously given for specific processing activities

To exercise these rights, contact us at [email protected]. We'll respond within one month, though complex requests may require additional time. You also have the right to lodge a complaint with the Information Commissioner's Office if you're dissatisfied with how we handle your data.

Cookies and Tracking

Our website uses cookies to enhance functionality and understand visitor behaviour. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

Third-Party Links

Our website may contain links to external sites not operated by us. We're not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Significant changes will be communicated through our website or direct notification where appropriate. The "last updated" date at the top of this page indicates when the most recent revisions were made.

Continued use of our services after changes are posted constitutes acceptance of the updated policy.

Children's Privacy

Our services are intended for adults. We do not knowingly collect information from individuals under 16 years of age. If we become aware that we've inadvertently gathered data from a child, we'll delete it promptly.

Contact Information

For questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Glistain Scrub
42 Marylebone High Street
London W1U 5HD
United Kingdom

Email: [email protected]