Legal

Privacy Policy

Last updated: May 2026 | Version 1.0

This policy explains how The Salon Network ("we", "us", "our") collects, uses, and protects your personal data when you visit our website or contact us. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

The Salon Network is a UK-based digital marketing agency specialising in web design, local SEO, and social media management for salons. We are the data controller for personal data collected through this website.

If you have any questions about how we handle your data, please contact us at: joshbax03.03@gmail.com

2. What Data We Collect

We only collect personal data that is necessary for the purposes described in this policy. This includes:

Contact information — your email address when you submit our enquiry form
Communication data — any information you voluntarily share when corresponding with us by email
Usage data — anonymous information about how you use our website (pages visited, time on site, browser type), collected via cookies if you consent

We do not collect sensitive personal data (such as health information, financial details, or government identifiers).

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiry and arrange a free strategy consultation
To send you information about our services that you have requested
To improve our website and understand how visitors use it (analytics only, with your consent)
To comply with our legal obligations

We will never sell, rent, or trade your personal data to third parties.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

Legitimate interests — processing your enquiry and communicating with you about our services
Consent — for analytics cookies and any marketing communications (you can withdraw consent at any time)
Contractual necessity — where we enter into a service agreement with you

5. Cookies

Our website uses the following types of cookies:

Strictly necessary cookies — essential for the website to function correctly. These cannot be disabled.
Analytics cookies — help us understand how visitors interact with our website (e.g., Google Analytics). Only set with your consent.

You can withdraw your cookie consent at any time by clearing your browser cookies and refreshing the page. The consent banner will reappear and you can decline.

6. Third-Party Services

We use the following third-party services which may process your data:

Formspree — processes form submissions on our behalf. Their privacy policy is at formspree.io
Google Analytics — website usage analytics (only active if you accept cookies). Google's privacy policy is at policies.google.com
Google Fonts — fonts loaded from Google's servers. No personal data is stored.
Calendly — used for booking consultation calls. Their privacy policy is at calendly.com/privacy

7. Data Retention

We retain your personal data only for as long as necessary:

Enquiry email addresses — up to 12 months from last contact, unless you become a client
Client data — for the duration of our service agreement plus 6 years (as required by HMRC for financial records)
Analytics data — as per Google Analytics' default retention period (26 months)

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your personal data ("right to be forgotten")
Right to restrict processing — request that we limit how we use your data
Right to data portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — withdraw any consent you have previously given at any time

To exercise any of these rights, please contact us at joshbax03.03@gmail.com. We will respond within 30 days.

9. Data Security

We take data security seriously. Our website uses HTTPS encryption, and we only use reputable, GDPR-compliant third-party processors. However, no method of internet transmission is 100% secure and we cannot guarantee absolute security.

10. International Transfers

Some of our third-party processors (such as Google and Formspree) may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

11. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

13. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

We would, however, appreciate the chance to resolve your concerns directly before you contact the ICO — please reach out to us first at joshbax03.03@gmail.com.