Privacy Policy

Who we are

Hair by Lucy is operated by Lucy Chalk, a sole trader providing mobile hairdressing services across central Essex. For the purposes of the UK General Data Protection Regulation (UK GDPR), Lucy Chalk is the data controller.

You can contact her at hello@lucychalk.co.uk

What information we collect

When you get in touch, the only information we collect is what you choose to share in your message — typically:

• Your name
• Your phone number or email address
• The content of any messages you send via WhatsApp, Facebook or email

We do not keep a client database, customer file or formal record system. We do not collect payment card details. This website does not use cookies or any form of tracking.

How we use your information

Your contact details are used only to reply to your enquiry and arrange your appointment. We do not use your information for marketing, we do not add you to any mailing list, and we do not share or sell your information to anyone.

Legal basis for processing

We process the minimal personal data you share with us on the basis of:

• Contract performance — replying to your enquiry and arranging the appointment you've asked for
• Legal obligation — retaining payment-related records where required by HMRC

How long we keep your information

Messages sent via WhatsApp, Facebook or email remain on the relevant platform until they are deleted. We will delete your conversation on request, and routinely clear out older message threads.

Where a payment has been made by bank transfer, basic financial records (date, amount, payer name on the transfer) are retained for six years in line with HMRC requirements.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Object to or restrict how we process your data
• Request a portable copy of your data

To exercise any of these rights, please email hello@lucychalk.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. Any changes will be published on this page with a revised date at the top.