Knights Privacy Policy

Who are we?

This website (‘Site’) is operated by Ballinteer Hair Company, a company registered in the Republic of Ireland (‘we’, ‘us’ and/or ‘our’). Our registered address is Ballinteer Hair Company, ℅ Azets, 3rd Floor, 40 Mespil Road, Dublin 4. D04 C2N4. You can contact us as indicated under the ‘Contact’ section below.

The data controller responsible for your personal data is Ballinteer Hair Company with whom you contract as a customer / guest (‘Ballinteer Hair Company’, ‘we’, ‘us’ and/or ‘our’).

What is this privacy policy for?

This privacy policy (‘Privacy Policy’) applies to personal data that we collect from you as a user of this Site or as a customer (‘you’ or ‘your’ being interpreted accordingly). It provides information on what personal data we collect, why we collect the personal data, how it is used and the lawful basis on which your personal data is processed, and what your rights are under the applicable data protection and privacy laws, including the General Data Protection Regulation (‘GDPR’) which became applicable to us, and you, as of 25 May 2018.

‘Personal data’ as used in this Privacy Policy means any information that relates to you from which you can be identified. By using our Site or submitting your personal data you are taken to accept the terms of this Privacy Policy, so please read it carefully.

The personal data we collect

Appointment booking and contact information

This includes your name, address, email address; address and phone number; gender and date of birth; country; a picture of yourself; and other information that you elect to disclose in your user profile on the Site. We also collect information about your debit/credit card and bank account information provided by you to our payment service providers. We require this information for the purpose of reserving Appointments and taking payments in line with our Cancellation Policy. For further details, please also refer to the section below headed ‘Payment information’.

Payment information

We also collect information about your debit/credit card and bank account information provided by you to our payment service providers: Stripe. We require this information for the purposes of completing your purchases with us. These details are managed with the highest Compliance Security Payment Card Industry Level 1.

Please note: our team has no access to payment details. For more information see our cancellation policy.

Other information

Personal details you choose to give when corresponding with us by phone or email; participating in user/customer/member surveys, or otherwise visiting and interacting with this Site or any other websites we operate; and personal data that you provide to us when you visit one of our salons. We can also combine personal data that you provide to us with other information we collect about you when you make a reservation through third-party services, such as online reservation or aggregator websites necessary to process your requests.

Automatically collected personal data

Log data

When you visit our Site, our servers record information (‘log data’), including information that your browser automatically sends whenever you visit the Site. This log data includes your Internet Protocol (‘IP’) address (from which we understand the country you are connecting from at the time you visit the Site), browser type and settings, the date and time of your request.

Our Site uses cookies (small text files placed on your device) and similar technologies to distinguish you from other users. This is to provide you with a good user experience when you browse our Site, and allows us to improve its features. For detailed information on the cookies and similar technologies we use, please see our Cookie Policy.

How we use your personal data

We use your personal data in the following ways:

• To acknowledge, confirm and deal with your Appointment bookings (and where necessary put you on our waiting list). If you have opted into receiving Digital Messaging Services from us.
• To send timely reminders and suggest suitable appointments, for those on the Appointment waiting list.
• To contact you in connection with user/customer/guest surveys, and use any information you choose to submit in response (provided that you gave us your consent to being contacted in this way at the time you provided us with the personal data).
• To personalise the content you receive and provide you with tailored content that will be of interest to you.
• To communicate with you about your visit to our Site and Digital Channels.
• To notify you about changes to our service, provide you with user support and enforce our terms, conditions and policies.
• To send marketing or promotional material, if consented.
• To comply with legal obligations or detect abuse, fraud and illegal activity.

Legitimate interests

We may process your data for our legitimate business interests, such as:

• Responding to enquiries or complaints
• Administering and improving our Site
• Conducting marketing analytics
• Providing postal communications
• Maintaining a suppression list if you opt-out
• Internal business operations including troubleshooting, research, testing, and analytics
• Security and fraud prevention

Disclosure of your information

We may share your personal data with third parties including:

• Service providers (e.g., payment processors, booking systems, IT support)
• Communications service providers (e.g., telecom operators for message routing)
• Digital Messaging Services (for those opted in)
• Ballinteer Hair Company group companies
• In case of business transfers
• Legal authorities where legally required

Payment information

Any credit/debit card payments and other payments you make through our Site will be processed by our third-party payment provider: Stripe. Payment data you submit will be securely stored and encrypted by our payment service providers using up-to-date industry standards.

We do not directly store or process card data ourselves. You may opt-out of us holding payment data, but will need to re-enter details for future reservations.

Personal data transfers

Your personal data may be transferred to, and stored in, countries outside the EEA, including the United States, to our service providers and Ballinteer Hair Company. We will implement appropriate safeguards such as data transfer agreements or standard contractual clauses. Contact us if you would like details of these safeguards.

Security

If you use a password to access parts of our Site, you are responsible for keeping it secure. Although we implement appropriate security measures, we cannot guarantee 100% security of information transmitted online.

Personal data retention

We retain your data only as long as necessary for the purposes outlined in this policy, or as required by law. For example:

• Customer/guest records: 6 years from last transaction
• Website submissions: 2 years post account closure or contact
• Marketing data: until you unsubscribe

We securely delete or anonymise data once no longer needed.

Your personal data protection rights

If your data is subject to the GDPR, you have the following rights:

• Right of access – to confirm if we process your data and get a copy
• Right to rectification – to correct inaccurate or incomplete data
• Right to erasure – to request deletion of your data
• Right to restrict processing – to limit use under certain conditions
• Right to data portability – to receive your data in a portable format
• Right to object – to object to processing based on legitimate interests or for marketing
• Right to withdraw consent – at any time, for processing based on your consent
• Right to lodge a complaint – with the ICO or your local data authority. (See: EU DPAs Contact)