Privacy & Cookie Policy

Who we are

Steel Serenity Hair & Beauty Lounge is the data controller responsible for your personal information when you visit our salon, call us, or book a sunbed session through our online booking page.

This website is a directory. It does not collect personal information through a form. Most of our independent specialists run their own businesses inside the lounge and take bookings directly through their own websites or phone numbers (Hayley at The Aesthetics Nurse by Hayley, Lorcan at Norfolk Physio, Tess at Aster Beauty, Natasha at Time To Breathe, Amy through her own booking system). When you contact those specialists directly, they are the independent data controllers for that interaction. When you book a sunbed session through our Timely page, Steel Serenity is the controller for that booking and Timely is our processor.

What we collect

We only collect what we need to look after you well. That includes:

• Contact details — your name, phone number, email address (where given) when you call us, walk in, or book a sunbed session online.
• Sunbed booking information — if you book a sunbed session through our Timely page, Timely collects your name, contact details, the time slot you select, and payment information on our behalf.
• Treatment information — if you have a treatment with Carly, our hair team, or another specialist, we keep notes about your treatment, any consultations, consent forms (especially for aesthetic treatments) and aftercare advice.
• Website usage — basic, anonymised information about how visitors use our site (see the Cookie policy section below).

Why we collect it

We use your information for these purposes only:

• To answer phone enquiries and book appointments.
• To manage sunbed sessions booked through our Timely page.
• To send appointment confirmations, reminders, aftercare notes, and any safety information relevant to a treatment.
• To carry out aesthetic treatments safely, including holding signed consent forms and pre-treatment medical history (where you have given that information).
• To meet our legal obligations (for example, accounting and tax records).

Lawful basis under UK GDPR: for booking and aftercare we rely on contract and legitimate interest. For aesthetic treatment records, we may also rely on consent and legal obligation.

How long we keep it

• Phone or walk-in enquiries that do not lead to a booking: 12 months, then deleted.
• Sunbed booking records (Timely): retained per Timely's own retention policy plus our own records for accounting purposes.
• Booking and treatment records: typically 7 years, in line with UK accounting and clinical record-keeping standards.
• Aesthetic treatment consent forms and medical history: 7 years from your last treatment with us.

Who we share it with

We do not sell your data. We share it only with services that help us run the salon:

• Timely — our sunbed booking provider. Timely is our processor for sunbed session bookings made through their platform and is bound by a data-processing agreement.
• Google Workspace — our email provider.
• Authorities — if we are legally required to share information, for example with HMRC or in response to a lawful request.

Independent practitioners. If you contact Hayley, Lorcan, Tess, Natasha or Amy directly through their own websites, phone numbers, or booking platforms, they are independent data controllers and your information stays with them. We do not share information with them unless you have asked us to.

Your rights

Under UK GDPR you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct anything that’s wrong.
• Ask us to delete your information (subject to legal record-keeping obligations).
• Ask us to restrict how we use your information.
• Withdraw your consent for marketing at any time (you can also click “unsubscribe” in any of our emails).
• Object to our use of your information.
• Ask for your information in a portable format.

To make any of these requests, email us on contact@steelserenity.co.uk. We’ll respond within one calendar month.

Cookie policy

This site uses a small number of cookies. We don’t use any third-party advertising or tracking cookies.

Strictly necessary cookies

This site itself sets no personal-identifying cookies. Our hosting provider, Netlify, may set technical cookies that keep the site delivered properly. These are anonymous and do not identify you.

Embedded content (third-party)

Our Visit Us page embeds a Google Map showing our salon location. The homepage embeds a short Vimeo film. When those load, Google or Vimeo may set their own cookies. We do not control those cookies. You can read Google's cookie practices at policies.google.com/technologies/cookies and Vimeo's at vimeo.com/cookie_policy.

If you book a sunbed session through our Timely page, Timely will set its own cookies on their domain. You can read Timely's privacy notice at gettimely.com/privacy.

Managing cookies

You can clear or block cookies through your browser settings at any time. Doing so might mean parts of this site or the third-party embeds work less smoothly.

Contact & complaints

If we can’t resolve your concern, you have the right to complain to the Information Commissioner’s Office (ICO):

ico.org.uk · Helpline: 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Changes to this policy

If we update this policy, we’ll change the date at the top of this page. For significant changes that affect how we use your information, we’ll let you know directly where we can.