Privacy Policy

Last updated: August 2026

This Privacy Policy explains how Aspinall Hair Limited ("we", "us", or "our") collects, uses, stores, and protects your personal data when you visit or submit an enquiry through our website ([graceaspinall.co.uk]).

We are committed to protecting your privacy and handling your personal information in a transparent, lawful manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller Information

Aspinall Hair Limited is the "Data Controller" responsible for your personal data.

Company Registration Name: Aspinall Hair Limited
Company Registration Number: 14950578 (Registered in England and Wales)
Registered Address: 68 Prescott Avenue, Petts Wood, Orpington, BR5 1AF
Contact Email: enquiries@graceaspinall.co.uk

2. Information We Collect

We only collect personal information that you voluntarily provide to us when using our contact form. This includes:

Basic Identity & Contact Data: First name, surname, and email address.
Enquiry Details: The content of your message submitted through the contact form.

Health Data & Special Category Data: Our website contact form does not intentionally request health-related information (such as skin or scalp conditions, medical history, or patch test results). However, if you voluntarily choose to include details regarding hair or scalp conditions in your message, you consent to us using that information solely to evaluate and respond to your enquiry safely.

3. How and Why We Use Your Personal Data (Lawful Basis)

Under the UK GDPR, we must have a valid legal reason to process your personal data. We use your information for the following purposes:

To Respond to Enquiries: Processing your contact details and message to answer questions, discuss hair services, or schedule appointments.
- Lawful Basis: Legitimate Interests (it is necessary for our business to respond to potential client enquiries) or taking steps prior to entering into a Contract.
Health & Safety Considerations: If you voluntarily disclose medical or scalp conditions in your message.
- Lawful Basis: Explicit Consent provided when you voluntarily submit those details to us.

We do not send marketing emails, promotional newsletters, or spam.

4. Client Photographs (Social Media & Portfolio)

From time to time, we take "before and after" photographs of client hair treatments for promotional or portfolio purposes.

Verbal Consent: Before taking or sharing any photographs, we obtain explicit verbal consent directly from the client during their appointment.
Withdrawal of Consent: You may withdraw your consent for us to use or publish your image at any time by emailing us at enquiries@graceaspinall.co.uk. Upon receipt of your request, we will remove the image from our website and social channels.

5. Cookies and Technical Tracking

Our website is built on the Wix platform.

Essential Cookies: Our website uses essential security, system, and functional cookies provided by Wix to ensure the website loads securely and functions correctly.
No Analytics or Marketing Trackers: We do not run third-party tracking scripts, Facebook Pixels, or Google Analytics tools to track your behaviour across the web.

6. Sharing Your Personal Data

We respect your privacy and never sell, rent, or trade your personal information to third parties for marketing purposes.

We only share data with trusted service providers who process data on our behalf to operate our business, strictly under our instruction:

Wix.com: Hosts our website and securely processes entries submitted through our online contact form.

7. Data Retention

We will only keep your personal data for as long as necessary to fulfil the purposes for which it was collected:

General Enquiries: Held for up to 12 months from our last communication, after which it is deleted, unless you become an active client.
Client Records: If you proceed to book services with us, relevant client consultation and contact details are retained for a minimum of 7 years following your last treatment to comply with legal, tax, and insurance liability obligations.

8. Your Legal Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access: You can request a copy of the personal information we hold about you (a Subject Access Request).
Right to Rectification: You can request that we correct inaccurate or incomplete information.
Right to Erasure ("Right to be Forgotten"): You can ask us to delete your personal data where there is no legal reason for us to keep it.
Right to Restrict or Object: You can object to our processing of your personal data under certain circumstances.
Right to Withdraw Consent: Where processing is based on consent (e.g. photo consent or voluntary health disclosures), you can withdraw consent at any time.

To exercise any of these rights, please contact us at enquiries@graceaspinall.co.uk. We will respond within one calendar month.

9. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can resolve the issue.

You also have the right to lodge a complaint with the UK data protection supervisory authority:

Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113