Privacy Policy

This policy applies to Whistles Hair Ltd, trading as Whistles Hair Salon ("we", "us", "our"). We are a private limited company, company number 16903193, with our registered office at 25 Brockley Rise, London, England, SE23 1JG. If you have any question about this policy or your data, contact us at info@whistleshair.co.uk, or by phone on 020 8699 7009.

Contact form and enquiry details (name, email, phone, your message). If you book an appointment through our Treatwell booking link, Treatwell collects and processes your booking details under their own privacy policy — we only receive what we need to provide your appointment. If you buy from our online shop, we collect your name, email, phone and delivery address; your payment card details are collected and processed directly by Stripe, our payment provider — we never see or store your full card number. If you submit a review, we collect your name, any role or context you give, your review text and star rating. If you accept cookies, Google Analytics collects anonymised data about how you use our website.

To respond to your enquiries and provide the service you have asked for. To process and fulfil shop orders, including sending order confirmation, shipping and tracking updates. To send you marketing updates by email or text, but only if you have opted in (for example, the marketing checkbox at checkout) — you can unsubscribe at any time. To understand how our website is used and improve it, using cookies you have consented to. To meet our legal and accounting obligations.

Stripe, to process shop payments securely. Supabase, which provides our secure database and website infrastructure. Vercel, which hosts our website. Resend, which sends transactional emails such as order confirmations. Google Analytics, for website usage analytics, only where you have consented to analytics cookies. Treatwell, if you book an appointment through our Treatwell booking link. We do not sell your personal data to anyone.

We keep order, enquiry and account records for as long as we need them for the purpose they were collected, and for as long as the law requires (for example, accounting records), after which we delete or anonymise them.

Under UK data protection law you have the right to access the personal data we hold about you, ask us to correct it, ask us to delete it, restrict or object to how we use it, ask for it in a portable format, and withdraw any consent you have given us at any time. To exercise any of these rights, contact us using the details above. If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk).

We use essential cookies needed to run the website (for example, to remember items in your basket), and — only if you accept them — analytics cookies that help us understand how the site is used. You can change your preferences at any time using the "Cookie preferences" link in our footer.

We may update this policy from time to time. The latest version will always be available on this page.