For the purposes of the General Data Protection Regulation (GDPR), the data controller is Sally Salon Services Limited (which we refer to as ‘Sally’ in this Notice), a private company limited by shares and which trades as Salon Services, Sally Beauty and Beauty Express in the United Kingdom and through Sally Salon Services (Ireland) Limited in the Republic of Ireland.
Sally is part of a large group of companies operating internationally (“Group”). Personal Data may be shared with other companies within the Group to achieve the purposes set out in this Notice.
For simplicity throughout this Notice, ‘we’ and ‘us’ means Sally and its brands
There are a number of different permitted basis which allows a company to collect and process your personal data, including:
We collect information from and about you at various times and in different ways to help us provide you with the best possible service based on our overall understanding of you, as well as to meet our obligations under the law. We use your data to:
Depending on how you choose to shop with us, we may collect and process your information as detailed below.
You are able to change how we use your data, you’ll find details in the ‘Your Rights?’ section below.
WHEN APPLYING FOR A TRADE CARD
IN STORE OR THROUGH OUR CALL CENTRE
IF YOU SHOP ONLINE
AT OUR CUSTOMER SERVICE CENTRE
SURVEYS AND FOCUS GROUPS
PRIZE DRAWS & PROMOTIONS
WHEN YOU COMMENT OR REVIEW
WHEN YOU FILL IN ANY FORMS
IF YOU USE OUR CAR PARKS AND SHOPS
WHEN YOU ACCESS OUR WIFI
We use a number of partners to help us provide the best possible service, understand what’s important to our customers, and improve what we sell. We sometimes need to share your data in order to achieve this, but we choose our partners carefully, and seek the maximum protection possible to keep your data as safe as possible. We also insist that their data is not shared with anyone else. If we stop using their services, any of your data held by them will either be deleted or rendered anonymous.
Examples of the partners we may share your data with are:
For example, delivery companies, debt recovery agencies, training providers, document storage companies, fraud prevention agencies, credit reference agencies.
For example, to manage your data and ensure it is kept up to date; to help us better understand what you like or are interested in so we can send you personalised advertisements; to understand how you use our websites; to obtain feedback on your experience; to understand if you liked our promotions.
Sometimes we will need to share your personal data with third parties outside the European Economic Area (EEA).
The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway.
We may transfer personal data that we collect from you to third-party data processors in countries that are outside the EEA such as Australia or the USA. For example, this might be required in order to provide support services.
If we do this, we have procedures in place to ensure your data receives the same protection as if it were being processed inside the EEA. For example, our contracts with third parties will state the standards they must follow at all times. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice and applicable data protection laws.
We will only keep your personal information for so long as it is necessary for the purpose for which is was collected and for us to fulfil our contractual and legal obligations. We maintain retention records of how long information containing personal data will be retained for.
At the end of the respective retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
Some examples of customer data retention periods:
You have certain rights to control your information and the manner in which we process it. This includes:
To make such a request please write to, Customer Service Team, Sally, The ARC, Hillington Park, Unit 3, 25 Colquhoun Avenue, Glasgow G52 4BN or email Privacy@salon-services.com. If we choose not to action your request we will explain to you the reasons for our refusal. To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice, and, where applicable, further information to help us search for your personal information, where a specific request is received. If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to make the request.
We will respond to your request within 1 month of us verifying your identity.
You can exercise the above rights and/or manage your information as detailed in the Updating Your Details section.
Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated.
You can learn more about your rights specific to Sally by reading this Privacy Notice or for more general advice, you can refer to here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
Our Privacy Notice is intended to be helpful to you in explaining why and how we collect and use your personal data and in providing you with information about your rights to control your information. Email us on firstname.lastname@example.org. • Call us on: 0800 980 9961 Or write to us at: Customer Services Sally, The ARC, Hillington Park, Unit 3, 25 Colquhoun Avenue Glasgow G52 4BN
If, however, we have been unable to address your concerns or you are unhappy with the way in which we have handled your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office.
If any of your personal information changes, you can update your personal details at any time by logging into your online account page and updating the My Details page. Alternatively, you can call us on 0800 980 9961 or visit your local store who will be happy to help. You can also email us at email@example.com with details of the changes required.Marketing communications
When you sign up for a Trade Card, you can decide how you would like to be contacted with marketing communications. You can easily manage your marketing preferences including opting out from receiving marketing communications at any time by logging into your online account page and going to the My Communication Preferences page.
Alternatively, you can call us on 0800 980 9961 or visit your local store who will be happy to help update your communication preferences. You can also email us at firstname.lastname@example.org with details of the changes required.Changes to our Privacy Notice
We may make changes to this Privacy Notice in the future. We will publish any changes on our website and where appropriate, we will notify you by email.