Privacy Policy
How we collect, use and protect your personal information.
Last updated: 7th September 2026
1. Who we are
This website is operated by Zuki's Hair & Beauty Ltd, formerly Freemans Hair Studio, a company registered in England and Wales under company number 17066660, with its registered office at Arnecote Park, Palmer Avenue, Bicester, Oxfordshire, United Kingdom, OX25 1QS. Our salon is at 9 Manorsfield Road, Bicester, OX26 6EH.
We are the data controller for the information described in this policy. If you have any questions about it, or about how we handle your information, call us on 01869 252124, speak to us in the salon, or write to us at 9 Manorsfield Road, Bicester, OX26 6EH.
2. The information we collect
Information you give us
When you book an appointment, call us, message us on Facebook or Instagram, or visit the salon, we collect the details you choose to give us. That typically includes your name, telephone number, the appointments you book and the services you have had.
Consultation and health information
Before some treatments we need to ask about your health so that we can carry them out safely. This can include allergies and reactions, the results of patch and skin tests, skin or scalp conditions, medication, and pregnancy. Health information is a special category of personal data, so we only record it with your explicit consent, and we only use it to decide whether a treatment is safe and how to carry it out.
We also keep notes that help us give you a consistent result from one visit to the next, such as colour formulas, products used and how your hair responded.
Photographs
We sometimes photograph our work. We will only take a photo of you, or share one in which you can be identified, if you agree first. That includes our website gallery and our Facebook and Instagram pages.
Information we collect automatically
Our website host keeps standard access logs, which record the IP address of the visiting device, the pages requested, the date and time, and the browser and operating system reported.
This site also runs first-party analytics, built into the content management system that publishes it. It records which pages are viewed and the page you arrived from. To count a visit only once, it stores randomly generated identifiers in your browser. Neither contains your name or any detail you have given us. We do not use Google Analytics, and we run no advertising or cross-site tracking.
3. Why we use your information, and our lawful basis
| What we use it for | Lawful basis |
|---|---|
| Booking, confirming and managing your appointments | Performance of a contract with you |
| Replying to a question you have sent us | Legitimate interests (replying to someone who has contacted us) |
| Recording consultation and health information so treatments are safe | Your explicit consent |
| Keeping notes of past treatments, such as colour formulas | Legitimate interests (giving you a consistent service) |
| Using photographs of you on our website or social media | Your consent |
| Taking payments and keeping accounts | Performance of a contract, and legal obligation |
| Keeping our website secure and available | Legitimate interests (protecting our systems from misuse) |
| Dealing with a complaint or a claim | Legitimate interests, and to establish or defend a legal claim |
We do not send marketing messages unless you have asked us to. If we ever do, every message will tell you how to stop them.
4. Who we share it with
We do not sell your personal information, and we do not share it for anyone else's marketing. We do share it with a small number of suppliers who process it on our behalf, under contract and only on our instructions:
- ReadyTec (Ready Design and Technology Ltd), which built and hosts this website.
- Google, which serves the fonts used across this site and the map on our Visit page.
Where a supplier serves a file to your browser (fonts or a map), your device contacts that supplier directly and your IP address is visible to them. We do not send them anything else about you.
Our website links to our Facebook and Instagram pages. If you follow those links, or message us there, Meta's own privacy policy applies to what Meta collects.
We may also disclose information where the law requires us to, or to establish or defend a legal claim.
5. Sending information outside the UK
Some of the suppliers above may process personal data outside the United Kingdom. Where that happens, we rely on the UK Government's adequacy regulations, or on the International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), to keep your information protected to a UK standard.
6. Keeping your information secure
We use appropriate technical and organisational measures to protect personal information. These include encrypted connections to this website, keeping client records where only our team can reach them, and password protection on our devices and accounts. No transmission over the internet can be guaranteed completely secure, but we take reasonable steps to reduce the risk.
7. How long we keep it
We keep personal information only for as long as we need it for the purpose we collected it for, and then delete it or destroy it securely:
- Client records and treatment notes: kept while you remain a client, and for six years after your last appointment.
- Consultation, health and patch test records: kept for six years after your last treatment, so we can answer any question about a reaction or a claim.
- Photographs: kept and published until you ask us to remove them. We will take them down from our website and social media pages as soon as we reasonably can.
- Accounting and tax records: six years after the end of the financial year they relate to, because the law requires it.
- Messages and enquiries: kept while they are useful for dealing with your enquiry or booking.
- Website server logs: kept only while they remain useful for keeping the site secure.
8. Your rights
Under UK data protection law you have the right to ask us to:
- give you a copy of the personal information we hold about you;
- correct information that is wrong or incomplete;
- delete information we no longer have a good reason to keep;
- restrict how we use your information, or object to us using it, where we rely on legitimate interests;
- transfer your information to another provider, where you provided it and we process it by automated means; and
- withdraw your consent at any time, where we rely on consent. That includes your consent to photographs and to us holding your health information. If you withdraw consent to health information, we may not be able to carry out treatments that depend on it.
To exercise any of these, call us on 01869 252124, ask us in the salon, or write to us at 9 Manorsfield Road, Bicester, OX26 6EH. You can also send us a message on Facebook or Instagram. We will respond within one month. There is no charge, unless a request is manifestly unfounded or excessive.
9. Cookies and similar technologies
This site stores a small amount of information on your device, for our own website and through content embedded from the suppliers listed in section 4, such as Google Maps. You can control and delete cookies in your browser's settings, though blocking some of them may stop parts of this website working, such as the map.
10. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised.
11. How to complain
If you are unhappy with how we have handled your information, please tell us first, by calling 01869 252124 or speaking to us in the salon, so we have the chance to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.