Privacy Policy

Samantha Hall Hair and Makeup

Last updated: 26/01/2026

1. Who we are

This Privacy Policy describes how we collect, use and protect your personal information when you contact us, make a booking or use our services. Data Controller: Samantha Hall, trading as Samantha Hall Hair and Makeup, 10 Hann Road, Tiverton, Devon, EX16 4FT. Contact email: info@samanthahallmakeup.com. We process personal data under the UK GDPR and the Data Protection Act 2018.

2. What personal data we collect

This may include your name, contact details, event date and venue, booking and service information, allergy and health information you choose to share, payment records (we do not store full card details), marketing preferences, photographs of finished looks, and basic website/technical data such as IP address and pages visited.

3. How we collect your data

Directly from you when you make an enquiry, complete a booking form, provide allergy information, or communicate with us — and automatically through cookies or analytics if you visit our website.

4. Why we use your data and our lawful bases

We use your data to respond to enquiries and manage bookings (performance of a contract), to deliver services safely including considering allergies (contract / explicit consent), to manage our business and records (legal obligation / legitimate interests), to use photographs for portfolio and marketing where you have not opted out (legitimate interests), to send marketing communications if you opt in (consent), and to comply with legal obligations.

5. Marketing

We will only send marketing messages if you have agreed to receive them, and you can opt out at any time by contacting us. This does not affect service-related communications.

6. Sharing your data

We do not sell your personal data. We may share it with service providers (hosting, email, payment processors, accountants) and with authorities where required by law. We require third-party providers to keep your data secure.

7. International transfers

Where service providers are located outside the UK or EEA, we ensure appropriate safeguards are in place so your data remains protected to UK GDPR standards.

8. How long we keep your data

Booking and financial records are generally kept for up to 7 years for tax purposes. General enquiries where no booking is made are kept for up to 24 months. Allergy/health information and portfolio images are kept only as long as necessary for the relevant purpose, or until you ask us to remove them.

9. Your rights

You have the right to access, correct, delete or restrict use of your data, to object to certain processing, to withdraw consent, and to data portability in certain circumstances. Contact us to exercise these rights. You can also lodge a complaint with the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

10. Cookies and website tracking

If our website uses cookies or analytics, we will display a cookie notice and, where required, ask for your consent before placing non-essential cookies.

11. Children

Our services and website are not intended for children, and we do not knowingly collect data relating to children.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page shows when it was last revised.