Privacy & Cookies

Last updated: 28 August 2026: updated to cover email confirmations, reminders and marketing consent.

This notice explains what information The Private Chair (“we”, “us”) collects when you use this website or book an appointment, why we collect it, and the choices you have. We are the data controller for that information.

What we collect

When you book through this site we collect the details you enter: your name, email address, mobile number, the service you want, your appointment date and time, and any notes you add. We also store the status of your booking (confirmed, done, cancelled, no-show) and whether it has been paid.

If you tick the marketing box, we additionally record that you consented, when, the exact wording you agreed to, and the IP address it came from. We keep that record so we can show your consent was properly given.

There are no accounts to create and no passwords. Links we email you to manage your booking are signed so only you can use them.

Why we use it, and our legal basis

• To arrange and carry out your appointment, including sending your confirmation and a reminder before your visit — necessary to take steps at your request and to perform our contract with you. These are service messages: you cannot opt out of them while you have a booking, but we will never put marketing in them.
• To send you offers and news, only if you ticked the box — your consent. You can withdraw it at any time by clicking unsubscribe in any marketing email, or by telling us. Withdrawing does not affect anything we did beforehand.
• To keep a record of appointments and payments — our legitimate interest in running the studio and dealing with any query afterwards, and our legal obligation to keep tax records.

How long we keep it

• Bookings: up to 24 months after your last appointment, then deleted. Where a payment was taken, we do not delete the record outright — we remove your name, email, phone and notes and keep only the reference, date, service and amount, because tax records must be kept for six years.
• Marketing contacts: until you withdraw consent, or 24 months after your last appointment if you have not.
• Consent records: kept for the life of the consent plus 24 months, because we need them to prove we handled your consent correctly.
• Unsubscribe records: kept permanently. If we deleted them we would have no way of knowing not to email you again.
• Email delivery logs: 12 months.

You can ask us to delete your details sooner (see Your rights).

Who it is shared with

Your booking details are seen only by Hak. We do not sell or share personal information for marketing. A small number of service providers process data on our behalf, under contracts that limit what they may do with it:

• Cloudflare — hosts the website and its booking database and provides security.
• Resend — delivers our confirmation, reminder and marketing emails.
• Stripe — if and when online card payment is offered, Stripe processes the payment. Your card details go straight to Stripe; they never touch our systems and we never see or store them.
• WhatsApp (Meta) — only if you choose to message us on WhatsApp. That conversation is governed by WhatsApp’s own terms.

Some of these process data outside the UK. Where they do, transfers are covered by the UK International Data Transfer Addendum or Standard Contractual Clauses.

We do not use your information for any automated decision-making or profiling.

Cookies and similar storage

This site does not use advertising, analytics or social-media tracking cookies. The only storage used is:

• Security cookies set by Cloudflare (for example __cf_bm) to protect the site from abuse. These are strictly necessary.
• A small flag saved in your browser to remember that you have seen the cookie notice, so it does not show every visit.
• On the private staff area only, a login token is stored in the browser so the barber does not have to sign in repeatedly. This is not used on the public site.

The links we email you for managing or cancelling a booking, and for unsubscribing, carry a signed token in the web address itself — not in a cookie. Nothing extra is stored on your device.

Because none of these are used for tracking or advertising, we show a short notice rather than a consent pop-up. If that ever changes, we will ask for your consent first.

Your rights

You can ask us to give you a copy of your information, correct it, delete it, or restrict or object to how we use it. Contact us using the details above and we will respond within one month.

If you are not happy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.