Privacy & Cookie Policy

Paintbox London Limited is registered in England & Wales under the Company Number 7379538 and its registered office address is 205 Hackney Rd London E2 8JL

This privacy policy sets out how Paintbox London Limited (we, us or Paintbox London) use and protect any information that you give when you use this website or the services provided by Paintbox London. We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website or by using the services provided by Paintbox London, then you can be assured that it will only be used in accordance with this privacy statement.

We are committed to respecting your privacy and to protecting your personal data. Furthermore, we fully endorse and will adhere to all UK data protection legislation including the principles of the UK Data Protection Act 1998, any subsequent amendments thereto and all legislation implementing the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”).

In particular we will comply with our legal obligations to keep personal data up to date, to store and destroy it securely, to not collect or retain excessive amounts of data, to use reasonable measures to protect personal data from loss, misuse, unauthorised access and disclosure and to ensure that appropriate technical measures are in place to protect personal data.

How you consent to this privacy policy

By using our website and any of our services and by providing us with any personal data, you are consenting to the use of that information as set out in this policy. Please do not give us any information if you do not want it to be used in this way.

Please note that if you do not provide certain requested information we may be unable to provide certain of our services to you.

What information we collect about you

1. Information which you provide us

You provide us with information when you book an appointment for a service or treatment, visit the salon for a service or treatment, buy a product or apply for a job, whether contact is online, on paper, by email or over the phone.

The information you give us may include your name, address, email address, phone number, relevant history which may suggest that a service or treatment should not go ahead or certain products should not be used (eg allergies, pregnancy, skin conditions), payment and transaction information, IP address and CVs.

For clients under the age of 16, we will only keep and use their personal information with the consent of a parent, carer or guardian.

2. Information we collect about you

We collect information about you when you engage with us in person, on the phone, by email or online when you visit, use and interact with our website, social media channels, customer surveys and/or offers. Information may be collected via cookies and similar technologies as detailed below.

3. Information we receive from other sources

We may also collect information about you from reputable third parties that operate in accordance with UK data protection legislation or other public sources, if this is permitted by law, such as analytics providers.

Use of cookies and similar technologies

We use cookies and may use similar technologies such as pixel tags and web beacons on our website and in our some of our emails.

What is a cookie?

A cookie is a small file, which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes. Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not.

A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of our website.

What are Pixel tags and web beacons?

Pixel tags and web beacons are tiny graphic images embedded in a web page or in emails to achieve similar purposes as those described above. For example, web beacons can be used to see which email messages are opened or forwarded to enable a better understanding of which types of email messages customers are interested in and to help improve communication with customers.

Why we use cookies and similar technologies?

We use cookies and may use similar technologies (some of which are managed for us by third parties) on our website and emails to:

  • Ensure that functionality operates as intended
  • Remember your choices and preferences during and between visits
  • Allow you to interact with our website by leaving comments or opinions
  • Post enquiries via any online forms we may use
  • Track your visit for statistical analysis, allowing us to improve the usability, speed and security of our website

For a full list of our current cookies, please see Cookies used on our website below.

Your consent for cookie deployment by our website

When you first visit our website, a banner will alert you to the use of cookies by our website. In compliance with the 2011 EU Cookie Law, our website operates on an ‘Implied Consent’ basis. This means that we will assume that you have opted-in for our website to deploy cookies until you choose to deactivate them within your browser settings or via the instructions below.

By default, the majority of popular web browsers automatically permit websites to deploy cookies onto your device. Below you can learn more about the specific cookies deployed by our website, and how they can be disabled.

For more information about cookies, we recommend visiting the Information Commissioner’s Office (ICO) Website where you can find the latest information, guidelines and advice.

How to disable cookies

Most modern browsers allow you to control your cookie settings for all websites that you browse. You can disable cookie deployment completely by editing your browser settings, however in doing this you may be limiting the functionality that is displayed on our website.

To learn how to disable cookies on your preferred browser we recommend reading this advice posted by Google.

In addition, we recommend that you check your privacy settings on any site which requires you to register or login, and that you never save your passwords.

Cookies deployed by our website

1. Google Analytics

Our website has Google Analytics installed which allows us to track and compile anonymous visitor statistics. The information collected ranges from simple traffic volume to the type of browser you are viewing our website with. This information is valuable to us not just for marketing analysis and quantification, but to improve the usability, security and load speed of our website content.

Google Analytics is a popular, secure, flagship webmaster product from Google. The privacy and security of Google Analytics data is a high priority for Google and more information about this can be found on Google’s Analytics Data Safeguarding page. 

Google also offer a Google Analytics Opt-out Browser Add-on that will allow you to automatically Opt-out of all websites that track your activity via Google Analytics.

No personal information is collected by Google Analytics.

2. Google Maps/Places

Our website has our Google Maps/Places profile embedded within an iframe. Google Maps creates cookies that enable the functionality of their powerful mapping software. No personal information is stored or shared on the cookies deployed by Google Maps/Places

3. Google Fonts

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website.

4. Font Awesome

This site uses the common representation of fonts and icons, called Web Fonts and SVGs provided by Fonticons, Inc. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you are using must connect to the Fonticons, Inc. servers. This will give Fonticons, Inc. notice that your website has been accessed through your IP address. The use of web fonts is in the interest of a uniform and attractive presentation of our website.

How information about you will be used

In law, we are allowed to use personal information, including sharing it outside the salon, only if we have a proper reason to do so, for example:

  • To fulfil a contract with you ie. to provide the service or treatment you have requested and to communicate with you about your appointments.
  • When it is in our legitimate interest ie. there is a business or commercial reason to do so, unless this is outweighed by your rights or interests.
  • When you consent to it. We will always ask for your consent to hold and use health and medical information.
  • We have rigorous data protection and security policies in place with all our suppliers.
  • We will not share your information with any other third party without your consent except to help prevent fraud, or if required to do so by law.

Who your personal data may be shared with

We recognise that your information is valuable and will take all reasonable measures to protect your information while it is in our care.

Your personal data may be transferred to:

  • Third party service providers who store/process information on our behalf, including providers of information technology, identity management, website hosting and management, data analysis, data back-up, security and storage services; mailing or printing agents, contractors and advisers that provide a service to us or act as our agents; and insurance companies, law enforcement, regulatory, or other government agencies for the purposes of fraud prevention and/or to comply with any legal and regulatory issues and disclosures.
  • We may also share certain pieces of aggregated, non-personal data about you with third parties. For example, we may provide a third party with information such as the number of users who searched for a particular term or how many users clicked on a particular advertisement. This information does not identify you individually.
  • We do not sell, rent, distribute or otherwise make personal data commercially available to any third party except as described in this policy or with your prior permission.

Security and protection of your personal data

We use reasonable technical, administrative and physical controls to safeguard your personal data from unlawful use and unauthorised disclosure. For example, we store your personal data on secure servers. In all cases we will ensure that any access or transfer of your personal data is compliant with UK data protection law.

Where we use third parties to provide elements of our service and/or to process data on our behalf they are bound by law or contract to protect your personal data and only use it in accordance with our instructions. We only allow third parties to handle your personal data on the understanding that they will keep the information confidential.

If one of our service providers (e.g. a mailing service) needs to transfer your personal data outside of the European Economic Area (“EEA”) then we will ensure a data protection level equal to the one in the EEA or we will obtain your consent to the transfer.

Other staff employed by Paintbox London who are engaged in providing you with our services, making appointments or are involved in record management may have access to your records. Any personnel who have access to personal and/or confidential information are subject to our confidentiality obligations.

If you want detailed information on how to protect your information and your computers and devices against fraud, identity theft, viruses and other online problems you can visit Get Safe Online, which is supported by HM Government and leading businesses.

Data retention

When you contact us, we may keep a record of your communication to help solve any issues that you might be facing. Your information may be retained for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirement.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Links to third party sites

This privacy policy only addresses the use and disclosure of personal data by us. Our website may contain links to other websites which may be of interest to you. In addition, we may provide social sharing and follow buttons, for example to Facebook, LinkedIn, Instagram and Pinterest, on our website.

If you use or follow these links or buttons to any of these third party sites, please be aware that they have their own cookies and privacy policies, which we recommend you read. We do not control these other sites and we cannot be responsible for the content of these sites or for protection of any information you provide to other sites. You should be cautious when entering personal data online.

Your data protection rights

We want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights.You have a number of legal rights under applicable data protection legislation in relation to the personal data that we hold about you. Under data protection law, these include:

  • Your right of access - You have the right to ask us for copies of your personal information. .
  • Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. Please note that there may be circumstances where you ask us to erase your information but we are legally entitled to retain it.
  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances. Again, there may be circumstances where you ask us to restrict the processing of your information, but we are legally entitled to refuse that request.
  • Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
  • Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances. Please note that this right of transfer only applies to information which you have provided to us.
  • Your right to opt out from receiving marketing materials from us - You can do this by contacting us or by clicking on the relevant link in the email itself. You may choose to opt out of one or all lists.
  • Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.

In the event that Paintbox London refuses your request under rights of access, we will provide you with a reason as to why, which you have the right to legally challenge. At your request Paintbox London can confirm what information it holds about you and how it is processed.

How to complain

You can exercise your rights by contacting us by email or by post. Please note that we usually act on requests and provide information free of charge. We may however be entitled to refuse to act on a request and we may charge a reasonable fee in relation to our administrative costs if the request is baseless, excessive or repeated.

We will respond to you as soon as we can. This will generally be within 28 days from the date we receive your request but if your request is going to take longer to deal with we will let you know.

You can also complain to the Information Commissioner's Office if you are unhappy with how we have used your data. Further information can be found on the Information Commissioner’s Office (ICO) Website

Changes to this Privacy & Cookie Policy

We may change this policy from time to time. Changes may be made when our business practices change or when data privacy laws are updated You should check this page from time to time to ensure that you are happy with any changes.

This policy was last updated on the 13 December 2018

Contact and further information

If you have any questions or concerns about this privacy policy or the information we hold about you, please contact us at Paintbox London:

By email:
By post: Paintbox London, 205 Hackney Rd London E2 8JL