Privacy Policy

Last Updated: 10 March 2026

1. Who We Are

Data Controller: HD Cutz
Data Processor (Platform Provider): Medianet LTD (hosting and technical operations of the App)
If you have questions or requests about this policy or your data rights, please contact:

• Email: privacy@hdcutz.co.uk
• Postal: HD Cutz, [Salon Address]
• App Support: via the "Support" section in the App

2. Scope

This policy applies to customers using our App and salon services, website visitors, and HD Cutz staff who access staff features in the App.

3. What Data We Collect

• Identity: name, title, date of birth (optional), profile photo.
• Contact: email, phone number, billing and delivery addresses.
• Account & Booking: login details, appointment history, service preferences, notes you provide.
• Transactions: order details, payment status, refund history (note: payment card data is handled by our payment processor; we do not store full card numbers).
• Technical: IP address, device IDs, browser type, operating system, app version, log files, cookies, analytics.
• Marketing: your marketing preferences and consent records (including time/date, method, and scope of consent).
• Staff (for authorised employees): work schedules, role, salon location, attendance/booking activity, internal notes related to operations.

4. How We Collect Data

• Directly from you: when you create an account, book services, make purchases, or contact support.
• Automatically: through cookies, analytics, and App usage logs.
• From third parties: payment processors, social login providers (if you use Google/Apple sign-in).

5. Why We Process Your Data (Legal Basis)

• Contract Performance: to provide bookings, process orders, and deliver services.
• Legal Obligation: to comply with tax, accounting, and consumer protection laws.
• Legitimate Interest: to improve the App, prevent fraud, and maintain security.
• Consent: for marketing communications (you may withdraw consent at any time).

6. How We Use Your Data

• Process and confirm bookings and orders
• Send appointment reminders and order updates
• Handle payments and refunds
• Provide customer support
• Improve App features and user experience
• Send promotional offers (only with your consent)
• Manage staff schedules, attendance, and salon operations (staff users only)
• Detect and prevent fraud or security incidents

7. Sharing Your Data

We may share your data with:

• Medianet LTD: our platform provider, who processes data on our behalf under strict data processing agreements.
• Payment Processors: to handle transactions securely (e.g., Stripe, PayPal).
• Cloud/Hosting Services: for secure data storage and App hosting.
• Analytics Providers: to understand how the App is used (anonymised where possible).
• Legal Authorities: if required by law or to protect our legal rights.

We do not sell your personal data to third parties.

8. International Transfers

Your data may be processed in countries outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, adequacy decisions) to protect your data in accordance with UK GDPR.

9. Data Retention

• Customer data: retained for up to 7 years after your last interaction (for legal/tax purposes).
• Marketing data: deleted if you withdraw consent or after 2 years of inactivity.
• Staff data: retained for up to 6 years after employment ends (for legal compliance).
• Technical/analytics data: typically retained for 12-24 months.

10. Your Rights

Under UK GDPR, you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data (subject to legal obligations).
• Restrict Processing: limit how we use your data.
• Data Portability: receive your data in a structured, machine-readable format.
• Object: object to processing based on legitimate interests or for marketing purposes.
• Withdraw Consent: withdraw consent for marketing or other consent-based processing at any time.

To exercise your rights, contact us using the details in Section 1.

11. Cookies & Tracking

We use cookies and similar technologies to improve functionality, remember preferences, and analyse usage. You can manage cookie preferences through your browser settings. Disabling cookies may limit App functionality.

12. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. However, no system is 100% secure, and you should take care to protect your login credentials.

13. Children's Privacy

The App is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates when changes were made. Continued use of the App after updates constitutes acceptance of the revised policy.

15. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

16. Contact Us

For any questions, requests, or concerns about this Privacy Policy or your data rights, please contact us via the details provided in Section 1.