Privacy & Cookies
How The Duo Hair & Beauty handles the personal information you give us, and what this website does (and does not) do with your data.
1. Who we are
This website is run by The Duo Hair & Beauty, of Norwich Road, Westfield, Dereham, Norfolk, NR19 1QE (“we”, “us”, “our”).
We are the data controller for the personal information described in this notice. You can reach us at hello@theduohairandbeauty.co.uk or 07700 900123.
2. The short version
- If you send us the booking form, we use your details only to reply and arrange your appointment.
- We do not sell your information, and we do not pass it to anyone for marketing.
- This website sets no cookies at all. There is no analytics, no advertising and no embedded third-party content.
- We only publish a photograph of a client if that client has agreed to it.
- You can ask us what we hold about you, and ask us to correct or delete it.
3. What we collect and why
| What | Where it comes from | Why (lawful basis) |
|---|---|---|
| Your name, email address, phone number, the service you are interested in, your preferred time and your message. | The enquiry form on our Contact page. | To reply to you and arrange an appointment, with your consent and because we have a legitimate interest in responding to enquiries. |
| Appointment details, treatment notes, colour formulas and patch-test / allergy-test records, where kept. | Records made in the salon at your appointment, kept on paper or in our own appointment book. | To provide the service safely (performance of a contract), our legitimate interest in running the business, and our legal and insurance obligations. |
| Phone number and email address if you ring or email us directly. | You, directly. | To answer you and arrange your appointment (legitimate interests). |
We do not deliberately collect “special category” data (for example, information about health or ethnicity) through this website. If you tell us about an allergy or a scalp condition at an appointment, that is recorded so we can treat you safely and is treated as confidential.
4. How long we keep it
- Website enquiries: up to 12 months, then deleted.
- Patch test and colour records: kept for six years, which is what our insurer expects us to be able to produce.
- Financial and tax records (including card receipts and invoices): 6 years, as required by HMRC.
5. Cookies and this website
This website does not set any cookies, and does not use analytics, advertising pixels, social media widgets or embedded maps. Nothing on this site tracks you between pages, and no third-party script or font is loaded from another company's server. Everything below is written in plain English on purpose — if any of it is unclear, ring or email us and we will explain it properly.
That means:
- there is nothing to accept or reject, so there is no cookie banner;
- the typefaces are the ones already installed on your device, and the photographs and artwork are served from our own web space.
Our hosting provider may keep ordinary server logs (such as the pages requested, the date and time, and the IP address that requested them) so that the site can be run, kept secure and faults investigated. Those logs are kept by our web host under their own privacy policy and are not used to profile visitors.
If you click through to our Facebook or Instagram pages, you leave this website and Meta’s own cookies and privacy policy then apply. In the same way, the map on our Contact page comes from Google and is only loaded if you press the button to show it — nothing is sent to Google simply by visiting the page.
If we ever add analytics, advertising or an embedded map in future, we will ask for your consent first and update this notice before doing so.
6. Who we share your information with
We keep sharing to the minimum. Where necessary, your information may be seen by:
- our web hosting and email providers, who store the website and the messages you send us;
- our accountant, for the financial records they are required to file;
- our insurer or a professional adviser if a claim or legal issue arises;
- the police, a regulator or a court, if we are legally required to disclose it.
We never sell your information, and never share it for anyone else’s marketing.
7. Your rights
Under the UK GDPR you have the right to:
- ask for a copy of the information we hold about you (a “subject access request”);
- ask us to correct anything that is wrong;
- ask us to delete information, where we don’t need to keep it;
- ask us to restrict or object to what we are doing with it;
- ask for your information in a portable format;
- withdraw consent at any time, where consent is what we relied on.
To make a request, contact us at hello@theduohairandbeauty.co.uk. We will respond within one month. We may ask you to confirm your identity first — we don’t want to hand anyone else your details.
8. Photographs, reviews and social media
We love showing off our work, but only with permission. We will only publish a photograph of you on this website or on our social media if you have agreed to it. If you are under 18, we will ask a parent or guardian. If you change your mind, tell us and we will take the photograph down from this website and our own social pages as soon as we reasonably can.
Reviews shown on this website (when we have any) are only ever copied from our own genuine customer feedback, with that person’s permission. We never write reviews ourselves and we never copy reviews from another business.
9. Children
We welcome children for haircuts. If you are under 16, please ask a parent or guardian to contact us on your behalf rather than sending us your own details.
10. Security
This website is served over an encrypted (HTTPS) connection, and the booking form is handled on our own server. We take reasonable steps to keep the information we hold secure, including limiting who can access it.
11. Changes to this notice
If we change what we do with personal information, we will update this page and change the “last updated” date at the top.
12. How to complain
Please talk to us first — most worries can be sorted out over a cup of tea. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
13. Content and copyright
The text and photographs on this website belong to The Duo Hair & Beauty unless stated otherwise. Please don’t copy them for your own use without asking us first. The website itself was designed and built by Code & Current and is maintained on behalf of the salon. If you believe something on this site infringes your rights, contact us at hello@theduohairandbeauty.co.uk and we will deal with it promptly.