Last updated: March 2026
BW Collective LTD ("we", "our", "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
BW Collective LTD is a hairdressing and beauty treatment business registered in England.
2. What Data We Collect
We may collect and process the following personal data:
- Your name, email address, and phone number when you contact us or book an appointment
- Payment information when you pay for our services
- Details of treatments and services you receive
- Any health or allergy information you provide for safe treatment (e.g., patch test records)
- Technical data such as your IP address, browser type, and pages visited when you use our website
3. How We Use Your Data
We use your personal data to:
- Manage bookings and provide our hairdressing and beauty services
- Communicate with you regarding appointments, enquiries, and updates
- Process payments securely
- Ensure the safety of treatments (e.g., allergy records)
- Improve our website and services
- Comply with legal obligations
4. Legal Basis for Processing
We process your data on the following legal grounds:
- Contract: To fulfil bookings and provide services you have requested
- Legitimate interest: To manage our business and improve our services
- Consent: Where you have given us explicit consent (e.g., marketing communications)
- Legal obligation: To comply with applicable laws and regulations
5. Cookies
Our website may use cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:
- Essential cookies: Required for the website to function properly
- Analytics cookies: To understand how visitors use our site and improve it
You can manage cookie preferences through your browser settings. Disabling cookies may affect your experience on our website.
6. Data Sharing
We do not sell your personal data. We may share your data with:
- Payment processors to handle transactions securely
- IT service providers who help us maintain our website and systems
- Legal or regulatory authorities when required by law
All third parties are required to process your data securely and in accordance with applicable data protection laws.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typically:
- Client records: Retained for the duration of our relationship and up to 6 years afterwards
- Health/allergy records: Retained as long as you remain a client
- Financial records: Retained for 6 years as required by HMRC
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify any inaccurate or incomplete data
- Erase your data (the "right to be forgotten") in certain circumstances
- Restrict or object to processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at bethany@bwcollectiveltd.co.uk.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
11. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
12. Contact Us
If you have any questions about this privacy policy or how we handle your data, please contact us: