Privacy Policy

Last updated: 28 October 2026

Wallflower Collective respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, book an appointment, purchase a product or service, sign up to our mailing list, or interact with us online.

Business name- WALLFLOWER COLLECTIVE LTD

Trading name: Wallflower Collective

Business address: 2 LITTLE RYE FARM COTTAGE

Email: REBECCA@WALLFLOWERCOLLECTIVE.CO.UK

Telephone: 07816 395 265

For the purposes of applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are responsible for deciding how and why your personal information is used.

What Information We Collect

Depending on how you interact with Wallflower Collective, we may collect the following information.

Personal and contact information

- Your name.

- Email address.

- Telephone number.

- Billing and delivery address.

- Information you provide when contacting us.

Appointment and salon information

When you book a hair appointment or consultation, we may collect:

- Appointment dates and times.

- Your preferred services and treatment history.

- Hair consultation details, including colour formulas and product preferences.

- Relevant information about your hair and scalp.

- Patch test records and information necessary to carry out treatments safely.

- Relevant health information you choose or are asked to provide for treatment safety.

Health information is treated as particularly sensitive personal data and will only be processed where an appropriate legal basis and condition under data protection law apply.

Purchase and payment information

When you purchase products, services, masterclasses or educational resources, we may collect:

- Details of the products or services purchased.

- Order and transaction records.

- Billing and delivery details.

- Information needed to provide access to digital products or educational content.

Payments may be processed securely by third-party payment providers, such as Stripe or other providers we use.

We do not intend to store your full payment card details on our own systems. Payment information is handled according to the relevant payment provider's processes.

Education and coaching information

If you purchase education, attend a masterclass or enquire about coaching, we may collect your contact details, booking information, payment records and information you voluntarily provide that is necessary to deliver the service.

Mailing list and marketing information

If you subscribe to our mailing list or choose to receive marketing communications, we may collect your email address, name and marketing preferences.

Website and technical information

When you visit our website, certain technical information may be collected, including your IP address, browser type, device information and information about how you use our website.

This may be collected through cookies and similar technologies, depending on your cookie preferences and the website services in use.

How We Use Your Information

We use your personal information for the following purposes:

- To manage salon appointments, consultations and bookings.

- To provide hair services and relevant aftercare information.

- To process purchases and deliver products, including wigs and hair-related products.

- To provide access to online masterclasses, educational materials and digital downloads.

- To respond to enquiries and provide customer support.

- To process payments, refunds and order-related queries.

- To send appointment confirmations, reminders and important service updates.

- To maintain appropriate business, accounting and tax records.

- To improve our website, services and customer experience.

- To send marketing communications where we are legally permitted to do so.

- To protect our business, prevent fraud and comply with legal obligations.

We will only use your personal information for purposes that are lawful and compatible with the reasons explained in this policy.

Our Lawful Bases for Processing Your Information

Under UK data protection law, we must have a lawful basis for using your personal information.

Depending on the circumstances, we rely on the following bases.

Contract: To manage your bookings, provide purchased services, fulfil product orders and deliver educational content.

Legal obligation: To maintain records and comply with applicable tax, accounting and other legal requirements.

Legitimate interests: To manage and improve our business, respond to enquiries, maintain appropriate business records and protect against fraud, where these interests do not override your rights and freedoms.

Consent: Where required, including for certain marketing communications, non-essential cookies and the processing of sensitive personal information.

Where we process health information or other special category data, we will also identify and rely on an appropriate additional condition under data protection law.

You may withdraw consent at any time where we rely on consent, although this will not affect processing that took place lawfully before withdrawal.

Bookings and Third-Party Services

We may use third-party providers to help operate our business and deliver our services.

These may include:

- Fresha: For appointment bookings and associated booking administration processing payments and deposits.

- Sum-up processing payments..

- Squarespace: For website hosting and website functionality.

- Stripe: For processing payments for online products, services or educational resources.

- Email and mailing-list providers: To manage customer communications and mailing-list subscriptions.

- Delivery and fulfilment providers: To deliver physical products, where applicable.

- Accounting and professional service providers: To help us meet our business and legal obligations.

These providers may process personal information on our behalf or act as independent controllers for certain activities.

Their use of personal information is subject to their own applicable privacy notices and contractual arrangements.

We only share information that is reasonably necessary for the relevant purpose.

The actual providers used by Wallflower Collective will depend on the services in operation at the time.

Marketing Communications

We may send you updates about our services, new products, wigs, educational opportunities, masterclasses, offers and other news from Wallflower Collective where we are legally permitted to do so.

Where consent is required, we will ask for it before sending marketing communications.

Where the law allows us to rely on another applicable permission, such as the customer soft opt-in, we will follow the relevant requirements.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting us directly.

Unsubscribing from marketing will not prevent us from sending necessary non-marketing communications, such as appointment confirmations, purchase information or important service updates.

We will not sell your personal information to third parties for their own marketing purposes.

Cookies and Website Analytics

Our website may use cookies and similar technologies to ensure the website functions correctly, remember preferences, understand website usage and support other website features.

Some cookies are necessary for the website to operate. Other cookies, such as certain analytics or advertising cookies, may require your consent.

Where consent is required, these cookies will only be used after you have given permission through the relevant cookie settings.

You can manage your cookie preferences through the cookie settings available on our website, where provided.

You can also manage cookies through your browser settings. However, blocking certain cookies may affect website functionality.

For further information about cookies, please contact us using the details provided in this policy.

How We Store and Protect Your Information

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.

These measures may include secure accounts, access controls, appropriate passwords and the use of reputable service providers.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

We only retain access to personal information where it is needed for legitimate business or legal purposes.

How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax and reporting requirements.

Retention periods will depend on the type of information and the reason it is held.

For example:

- Booking and customer records: Retained for as long as necessary to manage appointments, provide services and maintain relevant business records.

- Consultation and treatment records: Retained for an appropriate period to support safe service delivery, address queries and meet any applicable legal obligations.

- Purchase and accounting records: Retained for the periods required by applicable tax and accounting legislation.

- Marketing information: Retained until you unsubscribe or withdraw consent, where consent is the relevant basis, or until the information is no longer required.

- Enquiries: Retained for as long as necessary to respond and deal with any follow-up matters.

- Website technical information: Retained in accordance with the settings and retention periods of the relevant website and analytics services.

We may retain certain information for longer where necessary to establish, exercise or defend legal claims, or where the law requires it.

When personal information is no longer required, we will securely delete it or anonymise it where appropriate.

Sharing Your Information

We do not sell your personal information.

We may share your information with relevant third parties where necessary to provide our services, process payments, fulfil orders, manage bookings, operate our website, maintain business records or comply with the law.

These parties may include booking platforms, website providers, payment processors, delivery companies, email service providers, accountants, professional advisers and relevant public authorities where legally required.

Some service providers may store or process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable data protection requirements.

Your Data Protection Rights

Under applicable data protection law, you may have the right to:

- Access: Request a copy of the personal information we hold about you.

- Rectification: Ask us to correct inaccurate or incomplete information.

- Erasure: Ask us to delete your personal information in certain circumstances.

- Restriction: Ask us to restrict how we use your information in certain circumstances.

- Objection: Object to certain types of processing, including processing based on legitimate interests.

- Data portability: Request certain information in a portable format where the legal conditions apply.

- Withdraw consent: Withdraw consent where we rely on it as our lawful basis.

These rights are subject to applicable legal conditions and exemptions. For example, we may need to retain certain records to meet our legal obligations.

To exercise your rights, please contact us at:

Email: REBECCA@WALLFLOWERCOLLECTIVE.CO.UK

We may need to verify your identity before responding to a request.

We will respond within the timeframe required by applicable data protection law.

Complaints

If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to address them.

You also have the right to complain to the UK's Information Commissioner's Office (ICO).

You can find information about making a complaint through the official ICO website:

https://ico.org.uk/make-a-complaint/

Links to Other Websites

Our website may contain links to third-party websites, social media platforms or external services.

If you follow these links, the relevant third party may collect and use your personal information in accordance with its own privacy policy.

We are not responsible for the privacy practices of external websites, and we recommend reviewing their privacy information before providing personal data.

Children's Information

Our services are primarily intended for adults.

Where we provide services to individuals under the age of 18, we will handle their personal information appropriately and take any additional steps required by applicable law.

Where appropriate, we may need information from a parent or legal guardian to manage a booking or provide a service safely.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements.

The latest version will be published on our website with the updated revision date.

We encourage you to review this page periodically.

Contact Us 

If you have any questions about this Privacy Policy or how Wallflower Collective handles your personal information, please contact us:

Wallflower Collective

Business name: WALLFLOWER COLLECTIVE LTD

Email: REBECCA@WALLFLOWERCOLLECTIVE.CO.UK

Telephone: 07816 395 265

Business address: 2 LITTLE RYE FARM COTTAGE