Privacy Policy

Last updated: 19 June 2026

1. Who we are

Funky-Doos Hair Ltd operates the salon booking system at booking.funkydoos.co.uk. Our registered business address is Trident House, Paisley. Katy McBride is the named data controller responsible for your personal data.

Contact: hello@funkydoos.co.uk

2. What data we collect

• Name, email address and phone number (provided when booking)
• Appointment history and service records
• Payment records (amounts and dates — we do not store card details)
• Consultation forms including hair history and health information (where provided)
• Before and after photographs (where taken with your consent)
• Marketing consent preference

3. Why we collect it

• Contract: To manage your bookings and appointments
• Legitimate interest: To maintain service records and colour formulas
• Consent: To send you marketing communications (only if you opt in)
• Legal obligation: To maintain financial records

4. How we store it

Your data is stored securely on servers within the European Economic Area. We use encrypted connections (HTTPS) for all data transfers. Payment processing is handled by Square — their privacy policy applies to payment data.

5. How long we keep it

• Booking and payment records: 7 years (legal requirement)
• Consultation forms and photos: Duration of client relationship + 3 years
• Marketing preferences: Until you withdraw consent

6. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of all data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your personal data (subject to legal retention requirements)
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — withdraw marketing consent at any time

To exercise any of these rights, contact us at hello@funkydoos.co.uk

7. Cookies

We use essential session cookies only — these are required for the booking system to function. We do not use tracking or advertising cookies.

8. Third parties

• Square — payment processing
• ClickSend — SMS appointment reminders
• Brevo — transactional emails
• Sentry — error monitoring (anonymised technical data only)

9. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.