Privacy Policy

Last updated: 3rd September 2025

Who We Are

Rainbow Connection Salon is a hair and beauty salon based in Shrewsbury. You can contact us at info@rainbowconnectionsalon.co.uk.

We use SalonIQ, a third-party salon management and booking platform, to securely handle appointments and client records.

What Information We Collect

Information You Provide to Us

  • Your name, contact number, and email address
  • Appointment details and service history
  • Treatment notes (e.g. allergies, preferences)
  • Payment details (processed securely through third-party providers)

Information We Collect Automatically

When you visit our website, we may automatically collect:

  • Technical information about your device and browser
  • Your IP address and location data
  • Pages you visit and how you interact with our website
  • Information about how you found our website

This information is collected through cookies and similar tracking technologies.

How We Use Your Information

We use your information to:

  • Book and manage appointments
  • Keep a record of your services and preferences
  • Send appointment reminders or important updates
  • Respond to your enquiries
  • Meet legal and insurance requirements
  • Improve our website and services
  • Measure the effectiveness of our advertising

We do not sell or share your personal data for third-party marketing purposes.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • Remember your preferences and settings
  • Analyse website performance and user behaviour
  • Measure advertising effectiveness
  • Provide social media features

Third-Party Services We Use:

  • Google Tag Manager & Google Analytics: To understand how visitors use our website and improve our services
  • Google Ads: To measure the effectiveness of our advertising and show relevant ads
  • Facebook Pixel: To measure advertising performance on Facebook and Instagram
  • SalonIQ: For appointment booking and client management

These services may collect information about your online activities across different websites. You can control cookie settings through your browser or our cookie consent banner.

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Legitimate interests: Website analytics, advertising measurement, business communications
  • Contract: Providing salon services and managing appointments
  • Consent: Marketing communications (where you’ve opted in)
  • Legal obligation: Record-keeping for health and safety, tax purposes

How Your Information Is Stored

Your appointment and client data is stored securely within SalonIQ, a GDPR-compliant system used by salons across the UK. Only authorised staff can access your records.

Website analytics and advertising data is processed by Google and Facebook under their respective privacy policies and data processing agreements.

Data Sharing

We may share your information with:

  • SalonIQ: For appointment management and client records
  • Google: For website analytics and advertising measurement
  • Facebook/Meta: For advertising performance measurement
  • Payment processors: For secure payment handling
  • Legal authorities: When required by law

All third-party processors are required to protect your data and use it only for the specified purposes.

Your Data Protection Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate information
  • Request data deletion (when allowed by law)
  • Restrict or object to certain types of data use
  • Withdraw consent where previously given
  • Data portability (receive your data in a structured format)
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To make a request or ask a question about your data, please email us at info@rainbowconnectionsalon.co.uk.

Managing Your Cookie Preferences

You can manage your cookie preferences through:

Data Retention

We keep different types of data for different periods:

  • Client records: Retained for treatment history, legal, and insurance requirements
  • Website analytics: Typically retained for 26 months
  • Marketing data: Until you withdraw consent or we no longer have a legitimate interest

After retention periods expire, data is securely deleted or anonymised.

International Data Transfers

Some of our third-party services (Google, Facebook) may transfer your data outside the UK/EU. These transfers are protected by:

  • Adequacy decisions
  • Standard contractual clauses
  • Other appropriate safeguards as required by UK GDPR

Contact Information

For any questions about this privacy policy or your data rights, contact us at:

To contact the UK data protection authority:
Information Commissioner’s Office (ICO): ico.org.uk

Changes to This Policy

This policy may be updated to reflect changes in our services or legal obligations. The most recent version will always be available on our website. We will notify you of any significant changes.