Privacy Policy

Last updated September 2021

Introduction

Rebecca Jaynes and RJPM Limited are committed to protecting the privacy of our customers. This Privacy Policy is intended to inform how we gather, define, and use information that could identify you, such as your name, email address, address, other contact details or online identifiers, other personal information you provide to us and also what Cookies we use. Please take a moment to read this Privacy Policy carefully.

Controller

Rebecca Jaynes is the Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, please contact the DPO at:

Name: Carol Abram
Email address: info@rebecca-jaynes.com
Postal address: 5 Queens Square, Poulton-le-Fylde, FY6 7BW
Telephone: 07949 281398

You have the right to make a complaint at any time to the Information Commissioners Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would appreciate the opportunity to deal with any concerns you may have before you approach the ICO and would be grateful if you would contact our DPO in the first instance.

What information do we collect?

Personal information may be provided to us when you visit the salon, use our services, visit our website and/or contact us by telephone, email or other communication channels such as social media. The information we may collect includes:

Identity data: first name, last name, title, date of birth.
Contact data: address, email address, telephone numbers.
Health related data: GP details, medical health information we request prior to performing a cosmetic treatment.
Financial data: information required to process a payment from you.
Transaction data: details of payments from you, details of products and services you have purchased.
Usage data: information about how you use our website, products and services.
Marketing and communications data: preferences in receiving marketing information, communication preferences.

It is important that all personal information you give us is correct and accurate. This includes ensuring that we have your correct contact details.

If you plan to give us personal information on someone else’s behalf, for instance when making a booking on their behalf, you should only provide that third party’s details with their consent and after they have been given access to information about how we will use their details.

How do we use your personal information?

In general terms, we use personal information to provide you with the services and products you request, process payment, provide customer services, deliver our content and ads which we think may be of interest to you, for customer research, to send you marketing and promotional emails and to notify you about important changes to our products and services.

We may use your personal information for the following purposes:

Sending you information about your requested services (such as appointment reminders) by email and SMS.
Facilitating your bookings and taking payments.
Responding to your questions and concerns.
To keep our systems secure and to prevent fraud, security incidents and other crime.

To verify compliance with our terms and conditions and for the establishment, exercise or defence of legal claims.
To notify you about new services and special offers we think you will find valuable, for example via email and displaying advertising on third party websites such as Facebook (where consent is not required).
To tailor and personalise marketing notifications and advertising for you based on information you provide and your use of our products, services and website (please see the Cookies section of this Privacy Policy for further information).
To help us monitor, improve and protect our systems, products and services.
To personalise our systems, products and services for you, based on information you provide and your use of our products, services and our website (please see the Cookies section of this Privacy Policy for further information).

To investigate and respond to any questions or complaints received from you or from others, about our products or services.
To conduct internal research and analysis so that we can see how our products and services are being used and how our business is performing.
To conduct market research and consumer surveys.
To collate and publish reviews of products or services and use these for advertising campaigns.
To use customer communications for training, record-keeping and quality control purposes.

Where you give us consent, to notify you about new services and special offers we think you will find valuable, for example via email and displaying advertising on third party websites such as Facebook (where consent is not required).
To send you information about competitions, surveys and details of promotions.
To place cookies and use similar technologies in accordance with the Cookies section of this Privacy Policy and the information provided to you when those technologies are used.
On other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
To respond to requests by government or law enforcement authorities conducting an investigation.

To meet legal, regulatory and compliance requirements.

Your rights as an individual

An individual holds rights in relation to the personal information we hold on them, which includes:

The right to access what personal data we hold about the individual.
The right to be informed of how we are using the individual’s personal data.

The right to request the erasure of the personal data we hold on the individual.
The right to object to us processing the individual’s personal data or restrict us from processing some or all of the individual’s personal data.
The right to object to direct marketing from us.
The right to request the correction of incorrect information we hold on the individual.
The right to request that we transfer the information we hold on the individual to another service provider.

Your rights in relation to your personal information are limited in some situations. For example, if fulfilling your request would reveal personal data about another person or if we have a legal requirement or a compelling legitimate ground we may continue to process personal Information which you have asked us to delete. You also may have the right to make a complaint if you feel your personal information has been mishandled. We encourage you to come to us in the first instance but, to the extent that this right applies to you, you are entitled to complain directly to the relevant supervisory authority. If you wish to exercise any of the above rights, please contact us at info@rebecca-jaynes.com. Please note, however, that no financial information will be provided without verification.

Withdrawing consent or otherwise objecting to direct marketing

Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing at any time. You can do this by informing us of your wish to opt out verbally or in writing via letter, email or text.

Sharing personal information with third parties

We treat the security and method of processing your personal information very seriously, and we will never sell your personal information under any circumstances.

However, we may disclose your personal information to selected third parties, but only with your consent.

How long do we keep your personal information?

We retain your personal data for as long as necessary to provide you with our products and services and under the following criteria:

Where there is a legal basis, obligation or legitimate interest in continuing to process your personal information.
Where processing your information is necessary for the establishment, exercise or defence of legal claims.

Cookies

A Cookie is a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing. When you visit a site that uses Cookies first time, a Cookie is downloaded onto your computer/mobile device so that the next time you visit that site your device will remember useful information such as visited pages or login options.

Our website relies on Cookies to carry out certain functions and to tailor your user experience. Enabling these Cookies is not strictly necessary for the website to work but it will provide you with a better browsing experience. You can delete or block these Cookies but, if you do, some features on the site may not work as intended. You can control and/or delete Cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do, however, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.

Transfers of personal information

When personal data of persons located in the EU is processed though our salon software (Phorest), all of it is held within the EU. Your information is processed by the Phorest software and stored in the Amazon Web Services cloud infrastructure. During this process your data is encrypted in transit and at rest.

Change of purpose

We will only use your personal information for the purposes for which it was collected unless we reasonably consider that we need to use it for another reason. Any change of purpose will be compatible with the original purpose or be permitted under data protection legislation.

Consequences of not providing personal information

In the event that you want to purchase a service or product from Rebecca Jayne’s, certain personal information is required to enter into a contract with you. You can always choose not to provide personal information, however we may not then be able to provide you with the service of product.

Data security

We have put in place appropriate security measures to prevent you personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

All information entered into our salon software (Phorest) is encrypted during data input and transfer to the cloud. Any paper files recording your personal information are held in a locked filing cabinet which can only be accessed by authorised personnel.

Specific software rights are assigned to personnel working in the salon and the salon software system can only be accessed with a PIN assigned to them by management.

Changes to our Privacy Policy

This Privacy Policy is dated 1 September 2021. Revisions and updates to our Privacy Policy may be made from time to time to enable us to protect your data and to comply with our legal obligations.

If we change our Privacy Policy and procedures, we will post those changes on our website to keep you aware of what information we collect, how we use it and under what circumstances we may disclose it.