Privacy Policy

Specialist Beauty Designs takes the security of your personal data very seriously. This Privacy Policy explains in detail how we collect personal data, the reasons for this collection, the legal basis for processing and how we handle and maintain the security of the personal data we process.

You should note that we may change this privacy policy without notice. Please check back frequently to see any updates or changes made to this statement.

We do not collect more information than we need to fulfil our stated purposes and will not retain it for longer than is necessary.

We hold personal data about you as a user. This data includes, Full name, Email address, Address, and evidence of beauty certification. This policy will focus on customers. Employees will receive the relevant information in the data processor agreements we hold with them and our Employees have internal notification not relevant to this document.

We may occasionally send relevant information in the form of newsletters, industry news, similar products and services, invitations to events and surveys in accordance with a data subject’s preferences on an opt-in basis within our Contact Preference Centre.

We process customers personal data to provide relevant content and a customized experience for all from entering the website to leaving the website. We are required to gather and submit personal data internally to be able to process a customer as qualified and to share this data with the accounts team

Once a customer has created an account, we use the data provided for communication, marketing and internal reporting.

For customers, we collect and hold name, email, address, phone/mobile number.

Points of collection include: customers and Employers contacting us directly; Our website(s) support ticket submission and website enquiry forms.

Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.

We maintain a policy of retaining Employer and customer personal data in accordance with government guidelines. your data will be anonymized so that it can be used in a non-identifiable way for statistical analysis and business planning.

• We do not disclose or share personal data with external sources all records are kept local and only visible to a selected group of trusted staff. If a customer places an order on our site then, address, name and contact number will be given in aid to make delivery of your ordered goods possible, this is the only relevant information that will be shared with them in order for them to perform their specialized services. We work closely and ensure that your data is safe in their trusted hands. If we stop using their services, any of your data held by them will either be deleted or rendered anonymous.

If we were to not use the data in the way that we do then our services would not function and flow the same.

For more information on this please contact us:

• Email: dpr@sbdlondon.com

• Post: Data Protection Team, PO BOX 604, Rotherham, S63 3GW, UK

We recognize the importance of data security and take several measures to ensure the security of personal data. These include training all staff on data protection and cybersecurity via an inhouse set of tests conducted upon induction.

Access to your personal data is password-protected, and only those with permission are granted access. Any misuse of personal data by our employees is considered a disciplinary offence and a full investigation is automatically entered. All breaches are recorded in a breach log as required and we regularly review how improvements can be made at every stage.

We conduct randomized checks on offices, employees and digital equipment as part of our ongoing and continual improvement of organizational and technical security measures. If a data breach is discovered, it should be reported straight away to dbr@sbdlondon.com

We try to be as open as we can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal data by making a ‘Subject Access Request’ (SAR).

There is no charge for such a request, and we will respond within 30 days of a verified* request. If we do hold information about you, we will:

• Give you a description of it

• Tell you who it could be disclosed to

• Let you have a copy of the information in an intelligible form

To make a SAR to us for any personal information we may hold you need to put the request in writing addressing it to either:

• Email: dpr@sbdlondon.com

• Post: Data Protection Team, PO BOX 604, Rotherham, S63 3GW, UK

* To protect the confidentiality of your information, we will ask you to verify your identity before we proceed with any request you make under this Privacy Policy. If you have authorized a third party to submit a request on your behalf, we will ask them to prove they have your permission to act. From the date, we receive this information we will respond within 30 days.

We will try to deal with your request informally if you agree this is the best way to proceed, for example by providing you with the specific information you need over the telephone or by email. If we do hold information about you, you can ask us to correct any mistakes by making the request to the same email or postal address above.

If we choose not to action your request, we will explain to you the reasons for our refusal. If we feel your request isn’t covered under the definition of a SAR we shall endeavour to assist you to the best of our ability.

In cases where we are processing your personal data based on our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.

Individuals whose personal data we hold, and process have the following rights:

– If the personal data we hold about you is incorrect or incomplete, you can ask us to rectify or add to it (in the first instance we would ask to contact us or raise a ticket).

– Where we are using consent as our legal basis for processing your personal data (e.g. electronic communications inclusive of newsletters, industry news, similar products & services, invitations to events and surveys) you have the right to object at any time. Send your request to dpr@sbdlondon.com

– Where we are using your personal data because it is in our legitimate interests to do so, you can object to us using it this way.

– In some circumstances, you can restrict our processing of your personal data, request a machine-readable copy of your personal data to transfer to another service provider and compel us to erase your personal data if there is no other legal basis for its retention.

If you have any questions regarding this document or want to share something that is not covered then please contact us where we would be more than happy to help

• Email: dpr@sbdlondon.com

• Post: Data Protection Team, PO BOX 604, Rotherham, S63 3GW, UK