Legal
Privacy Notice
What we collect, why we collect it, and the control you have over it.
Who this notice covers
This notice explains how JB Brands Luxury Salon & Spa (“we”, “us”) handles personal information collected through this website, through appointment requests, and in the course of providing services at our studio.
It applies to guests, prospective guests and website visitors. Last updated: [date].
Information we collect
- Contact details: name, email address, telephone number and, where relevant, postal address.
- Appointment information: services requested, preferred provider, dates and times, and notes you supply.
- Service history: treatments performed, formulations used, products purchased and provider notes.
- Health information you choose to disclose: allergies, sensitivities, skin and scalp conditions, pregnancy, medications and contraindications.
- Payment information: processed by our payment provider. We do not store full card numbers on our systems.
- Website usage data: basic analytics such as pages viewed and device type, where analytics are enabled. [Confirm your analytics tooling here.]
How we use your information
- To schedule, confirm, prepare for and deliver your appointments safely.
- To maintain accurate service records so future visits build on previous work.
- To contact you about bookings, changes, patch tests and follow-up care.
- To take payment and maintain financial records as required by law.
- To send marketing or newsletter content, only where you have opted in.
- To improve our services, website and studio experience.
Why we are allowed to use it
Depending on your location, our lawful bases include performing our contract with you (delivering booked services), our legitimate interests (running a safe and effective salon), your consent (marketing and photography), and compliance with legal obligations (tax, health and safety records).
How long we keep it
Service and health records are retained for [period] so we can deliver safe, consistent treatment. Financial records are retained for the period your local tax authority requires. Marketing consents are retained until you withdraw them.
Your rights
- Request a copy of the personal information we hold about you.
- Ask us to correct information that is inaccurate or incomplete.
- Ask us to delete information where we have no continuing legal or safety reason to keep it.
- Withdraw consent to marketing or photography at any time.
- Object to or restrict certain processing, and request portability of your data where applicable.
- To exercise any of these, contact us at [email@yourdomain.com].
Security
We use reasonable technical and organisational measures to protect guest information, including access controls, encrypted transmission and staff confidentiality obligations. No system is perfectly secure, and we will notify affected guests and regulators where required if a breach occurs.
Children's information
We do not knowingly collect information from children under [16] through this website. Records for younger guests receiving services are created with the consent of a parent or guardian.
Contacting us
Questions about this notice, or about the information we hold, can be sent to [email@yourdomain.com] or [Phone Number], or posted to [Street Address, City, State ZIP].
If you are not satisfied with our response you may contact your local data protection authority.