Hair, Beauty and Complementary Therapies Services Privacy Notice
Introduction
Glasgow Clyde College takes its data protection responsibilities seriously. This purpose of this Privacy Notice is to inform you – as a Hair, Beauty and Complementary Therapies service client - how we will process your personal information, setting out our responsibilities and obligations as a Data Controller.
All your personal information will be treated in accordance with data protection law including the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
Glasgow Clyde College, 690 Mosspark Road, Cardonald, Glasgow, G52 3AY is registered with the ICO, registration number Z7497735. Our Data Protection Officer (DPO) is Mairead Wood, gfrancis@glasgowclyde.ac.uk.
Purposes for processing
Your personal information is collected when you enquire about our services in person, on the phone, by text or via email. We use the information you provide to deliver an effective Hair, Beauty and Complementary Therapies service to clients. We collect your name and contact details to allow us to manage your client file and send you booking information.
We collect information on your medical history including details of any allergies to ensure any treatments are being delivered safely. We also provide patch-testing prior to some hair and beauty treatments. We will use this information to ensure that there are no contraindications that would prevent or restrict your access to certain treatments as some treatments could exacerbate existing medical conditions or cause an adverse reaction.
We will also collect your marketing preferences. If you opt to receive marketing communication we will contact you with details of special offers or upcoming events. If you no longer wish to receive marketing from the Salon, or you would like to update you marketing preferences, you can do so easily by contacting us.
Our lawful basis for processing your information
Collecting your personal information is necessary to book an appointment for you and therefore for the performance of the contract we have with you to provide our salon services.
Processing your medical information is necessary to comply with our Legal Obligation to comply with Health and Safety Legislation and if you do not agree to the processing of your medical information for this purpose then we will be unable to perform certain treatments on you.
Contacting you with marketing materials will only be done where you have given specific, explicit consent for us to do so. You can withdraw your consent at any time, which will stop us processing this data.
Who we share your data with
The Hair, Beauty and Complementary Therapies service at Glasgow Clyde College will not share your personal information with any third parties or use the information you provide for any other purpose other than outlined within this privacy notice.
Security and retention
We will take all reasonable precautions to prevent the loss, misuse or alteration of information you give to us. The information you provide will be stored securely and will only be accessed by authorised Hair, Beauty and Complimentary Therapies service staff and students on a need-to-know basis.
In accordance with the Health and Safety at Work Act 1974 the information you provide will be retained for three years from the date of the last treatment. This information will be retained by the College for six years after your last attendance, and then destroyed confidentially.
The College has robust Information Security and Data Protection polices in place to protect all the data it holds, including your personal data.
Your rights
Under data protection law, you have legal rights in relation to your information, including:
• your right to be informed of how your data is being processed, (as in this privacy notice);
• your right to access and obtain a copy of your data on request, often referred to as a subject access request;
• your right to ask an organisation to change incorrect or incomplete data;
• your right to ask an organisation to delete or stop processing your data under certain circumstances;
• your right to object to the processing of your data under certain circumstances;
• your right to data portability and in relation to automated decision making and profiling.
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply. Further details about your privacy rights can be found on the Information Commissioner’s Office website www.ico.org.uk.
Further Information
If you would like further information about how your personal data is processed by Hair, Beauty and Complimentary Therapies services at Glasgow Clyde College or you have any concerns, please contact our Data Protection Officer (DPO) in the first instance. You can do this by:
Email: gfrancis@glasgowclyde.ac.uk
Telephone: 0141 272 0770
If you are dissatisfied with the response, you have the right to lodge a complaint with the Information Commissioner’s Office using their website https://ico.org.uk/make-a-complaint/ by email: casework@ico.org.uk or by phone on 0303 123 1113. Alternatively, you can write to:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
We review our privacy notices regularly. If we anticipate that substantial changes will be made to the way we process your data, we will update our privacy notices and communicate the changes to you before starting any new processing.