DATA PROCESSING NOTICE

This is the Data Processing Notice (also known as a Privacy Policy) of The Beauty Boutique. It is issued in compliance with the Data Protection (Bailiwick of Guernsey) Law, 2017 “the Law”
We care about your personal data and ensuring you are informed about how we use it.  We promise to protect your data, and to manage any information you share with us in line with data protection law.

This Notice sets out how and why we collect and use your personal data and our legal basis for doing so.

Who Are We?
We are a beauty salon and are registered with the Guernsey Registry. We are also registered with The Office of the Data Protection Authority – registration number DPA5100.

What Data We Collect
We only hold personal contact details, payment details, and in some instances medical details of our clients.  This not only enables us to contact our clients and to enable us to carry out our core business services or comply with a contract, but also to comply with statutory requirements and our legal obligations.

Where Does This Information Come From?
The personal data we process is given to us directly by you, our clients. We do not collect any personal data from any other sources.

Our Lawful Basis For Processing Your Personal Data
In order to be able to provide you with the services you require, we use our legal contractual basis for processing your data or rely on our legitimate business interests.

CONSENT

In cases where we are not relying on a contractual or legitimate business interests basis, we rely on consent to lawfully process your data.  This can be obtained orally or by email.  You have the right to withdraw your consent at any time, however, it must be highlighted that by withdrawing your consent we may not be able to provide you with our core business services.

Types of Personal Data We Collect

  • Your contact details, such as name, postal address, email address and contact number
  • Bank details
  • A record of our communications with you
  • Medical records

Special Category Data
We may need to keep on record any medical conditions that you might have.  This will only happen with your explicit consent.

Sharing of your Personal Data
We may share your details with our registered booking keeping and accountancy company.  We do not share your data with any other organization.

Transfer of Data
We do not transfer your personal data outside the Bailiwick of Guernsey.

Direct Marketing
We do not use any form of direct marketing.

Retention of Data
All data is retained securely and only used for the purposes for which it was collected under the Law.  Data is only retained for as long as is required to comply with our statutory obligations, in order for us to provide you with the services forming part a contract or with your consent.  In any event, data is reviewed and weeded accordingly after 7 years. Please see our Retention Policy for details.

Your Rights
The Law provides you with a number of rights, but specifically and of relevance, you have the right to:

  • request confirmation of the personal data that we hold about you and what we are doing with your data
  • request correction of your personal data if incorrect, out of date or incomplete
  • request that we stop any consent-based processing of your personal data after you have withdrawn that consent

Contacting Us

  • We are defined as a Controller according to the Law. If you have any questions or queries regarding how your personal data is being managed, please contact the manager by writing to Sian Merrien or by emailing sian@thebeautyboutiqueguernsey.com.

Contacting the Regulator

  • If you feel that your data has been handled incorrectly or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the data protection regulator – The Office of the Data Protection Authority (ODPA). You can contact them for advice by telephoning (01481) 742074 or by email to enquiries@opda.gg or you can submit a complaint online at odpa.gg  and complete the ‘make a complaint’ section.

Last updated 10/11/21