Your privacy is important to us. This policy outlines how Leo & Simon Hair Salon collects, uses and protects your personal data in compliance with the UK GDPR and the Data Protection Act 2018.
Data we collect
- Name, email address, phone number and postal address.
- Appointment history, service preferences and patch test records.
- Payment transaction records (we do not store full card details).
- IP address and technical usage data when visiting our website.
How we use your data
- To manage your bookings and provide customer service.
- To send important updates regarding your appointments or patch tests.
- For marketing communications, only if you have explicitly opted in.
- To improve our services and website experience.
- To comply with legal, insurance and accounting obligations.
Legal basis for processing
- Consent (e.g. for marketing).
- Contractual necessity (e.g. fulfilling a booking).
- Legal obligation (e.g. tax and health & safety records).
- Legitimate interests (e.g. improving our business).
Health, allergy and patch-test information
For certain services, we may ask for information about allergies, previous reactions, skin sensitivity, medication, pregnancy, recent illness, surgery or other health-related details where relevant to the safe provision of colour, extension or treatment services.
This information is treated as sensitive/special category data. We only use it to assess whether a service is suitable, to carry out patch testing, to protect your safety, to meet insurance requirements and to handle any complaint or legal claim.
Data retention
We only keep personal data for as long as reasonably necessary for the purpose it was collected.
- Enquiry data: kept for up to 12 months after the last contact if no booking is made.
- Booking and appointment records: kept for up to 6 years for accounting, insurance, complaint handling and legal claim purposes.
- Patch test, allergy, consultation and treatment notes: kept for up to 6 years after your last appointment, or longer where required for insurance, safety or legal reasons.
- Marketing consent records: kept until you unsubscribe or withdraw consent, plus a suppression record so we do not contact you again by mistake.
- Payment records: kept as required for tax and accounting purposes. We do not store full card details.
- Complaint records: kept for up to 6 years after the complaint is resolved.
Where we no longer need personal data, we will delete, anonymise or securely destroy it.
Data sharing
We do not sell your personal data to third parties. Your data is only shared with trusted service providers necessary to operate our business (e.g. our booking software provider, Fresha, and our payment processors).
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise any of these rights, please email info@leo-simon.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Salon & Contact Details
Leo & Simon Hair Salon (trading name of Leo Mancini)
4 High Street, Eton, Windsor, SL4 6AS
Phone: 01753 832070
Email: info@leo-simon.co.uk
Last updated: May 2026.