Privacy Policy

1) Who we are

RoseRico Colour Studio (“RoseRico”, “we”, “us”) provides hair colour services from a home studio in Rubery (B45), Birmingham, UK. We are the “data controller” for personal data collected through this website.

Website: RoseRico Colour Studio
Contact email: via my contact form
Phone: +44 7703 486142

2) What personal data we collect

Depending on how you contact us and what you do on the site, we may collect:

• Contact details (name, email address, phone number).
• Consultation/enquiry details (your hair history, goals, service preferences, availability).
• Photos you send (e.g., before/goal photos) if you choose to share them for consultation planning.
• Booking/payment details if you use a third-party booking system (we typically receive booking confirmation and contact details; the provider processes payment).
• Technical data (IP address, device/browser type, pages visited) via cookies/analytics (if enabled).

3) Why we collect data (and our lawful basis)

We only use your data for clear, limited reasons:

• To respond to enquiries and consultation requests (lawful basis: legitimate interests and/or contract when booking services).
• To provide services and manage bookings (lawful basis: contract).
• To improve the website (lawful basis: legitimate interests; for non-essential analytics cookies we ask for consent).
• To comply with legal obligations (lawful basis: legal obligation), e.g., record keeping for tax where applicable.

If we ask for consent (for example, for non-essential cookies or marketing emails), you can withdraw that consent at any time.

4) Who we share data with

We do not sell your personal data. We may share data with trusted service providers only when necessary to run the website and services, such as:

• Booking provider (e.g., Fresha/Calendly/other) for appointments.
• Payment processor (if taking deposits online).
• Email provider (to reply to your enquiry).
• Website hosting and security providers.
• Analytics (e.g., Google Analytics) if enabled and consented.

Some providers may store or process data outside the UK. Where relevant, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses).

5) Cookies & analytics

Cookies are small files stored on your device. We may use:

• Essential cookies needed for the website to function.
• Optional analytics cookies to understand page usage and improve content (only if you consent).

You can manage cookies in your browser settings and (if we use a cookie banner) through the cookie preferences tool. See also: Cookie Policy (if you publish one separately).

6) How long we keep data

We keep personal data only as long as needed for the purposes above:

• Enquiries: typically up to 12 months.
• Client records: as needed for service continuity and legal/tax obligations (timeframes vary).
• Photos: kept only as long as required for your consultation and service plan, unless you give permission for use in a portfolio/testimonial.

7) Your rights

Under UK data protection law, you have rights including:

• Access — request a copy of your personal data.
• Correction — ask us to fix incorrect or incomplete data.
• Deletion — ask us to delete your data in certain circumstances.
• Restriction — ask us to limit processing in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Portability — request your data in a portable format (where applicable).

To exercise your rights, contact us using the details below. We may ask for proof of identity to protect your data.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.

8) How we keep data secure

We take appropriate steps to protect your data, including access controls, password protection, and secure service providers. No method of transmission or storage is 100% secure, but we work to reduce risk and only use reputable tools.

9) Children

This website is not intended for children, and we do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take steps to remove it.

10) Contact

If you have questions about this policy or want to exercise your rights, contact:

Email: via my contact form
Phone: +44 7703 486142

---