Client privacy notice

1. Who we are

The data controller for personal information collected through C2C Haircare is:

2. What we collect

When you make a booking or enquiry, we collect:

• •Name of the person making the booking
• •Name of the individual receiving the service, where different
• •Contact details, telephone number and email address
• •Service address or location of the appointment
• •Service preferences, hair type information, and any access or scheduling requirements you provide

We do not collect clinical, medical, or health record information. Any personal circumstances shared with us in connection with a booking are treated with complete discretion and are not recorded beyond what is necessary to coordinate and deliver the appointment.

Payment data

Payments are processed by Stripe, our third-party payment processor. Stripe holds payment card details securely on our behalf. We do not store card information. Where payment is taken by telephone, details are entered directly into Stripe at the time of the call. Stripe's privacy policy is at stripe.com/gb/privacy.

Booking records

We maintain records of bookings and services delivered. These are used to manage appointments, issue invoices, produce service reports for institutional clients, and maintain our operational records.

Platform services

We use a small number of trusted third-party services to operate our platform, including for data storage, email communications, and customer relationship management. These services process personal data only as necessary to provide their function and are bound by appropriate data protection terms.

3. How we use your data

We use your personal data only for the purposes for which it was collected:

• •To coordinate, confirm, and deliver haircare appointments
• •To communicate with you about bookings
• •To process payments and maintain financial records
• •To produce service reports for institutional clients
• •To respond to complaints or queries

Our legal basis for processing is contract performance, legitimate interests, and legal obligation (financial records under HMRC requirements). We do not use automated decision-making in our booking or matching process. All decisions are made by a member of the C2C Haircare team.

4. Who we share your data with

We do not sell or share your data for marketing purposes. We share personal data only where necessary:

• •With the professional assigned to your appointment, they receive your name, address, and appointment details
• •With Stripe to process payments
• •With institutional clients where we provide service reports covering their bookings
• •With trusted platform service providers under appropriate data protection agreements
• •Where required by law or a regulatory authority

5. How long we keep your data

At the end of a retention period, personal data is securely deleted or anonymised.

6. How we store your data

Personal data is stored securely in password-protected systems with access restricted to authorised personnel. Payment data is held by Stripe. We take reasonable measures to protect personal data against unauthorised access or loss. In the event of a breach likely to affect your rights, we will notify the ICO within 72 hours.

7. International transfers

Some third-party services we use may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, including standard contractual clauses or adequacy decisions.

8. Your rights

To exercise any of these rights, contact info@c2chaircare.co.uk. We will respond within one month at no charge.

9. Cookies

Our website uses strictly necessary cookies to function and, where you consent, analytics and third-party cookies. You can manage your preferences through the consent banner on our website. If you book by phone or email, no website cookies are involved in collecting your personal data.

10. Complaints

If you have a concern about how we have handled your data, contact us at info@c2chaircare.co.uk. We will acknowledge within five working days and respond within one month. If unsatisfied, you may complain to the ICO at ico.org.uk or 0303 123 1113.

11. Contact us