Privacy policy

Last updated, 21 January 2026

This privacy policy explains how Mccrory Hair collects, uses, stores, and protects personal information when you use our website, contact us, and book services with us.

Who we are

Mccrory Hair
340 Oxford Road, Manchester, M13 9NG
Telephone, 0161 273 3330
Email, hair@mccroryhair.co.uk

Mccrory Hair is the data controller for the personal information described in this policy.

What information we collect

We may collect and process the following information.

Information you provide to us

  • Name, email address, telephone number
  • Appointment details, services requested, stylist preferences
  • Messages you send us through forms, email, social media, or phone
  • Photos you choose to share with us for consultation, or photos we take with your permission for your hair record or portfolio
  • Allergy and sensitivity information, and other relevant notes you choose to share so we can deliver services safely

Information we collect automatically

  • Basic technical information when you use our website, such as IP address, browser type, device information, and pages viewed
  • Cookie related information, where cookies are enabled on the site

How we use your information

We use your information to:

  • Respond to enquiries and provide customer support
  • Manage bookings, appointments, and consultations
  • Deliver services safely and appropriately, including recording relevant sensitivities where you tell us about them
  • Take payment and keep accounting records
  • Send appointment confirmations and reminders
  • Improve our services and website performance
  • Send marketing messages where you have opted in, or where the law allows, and you can opt out at any time

Our lawful basis for processing

We rely on one or more of the following lawful bases under UK GDPR, depending on what we are doing with your information:

  • Contract, when we need your details to book and deliver the service you requested
  • Legitimate interests, for running the salon, improving services, preventing misuse, and responding to requests, while making sure your rights are protected
  • Consent, for marketing in many cases, and for specific uses like using photos for promotional purposes, where we ask you first
  • Legal obligation, for record keeping such as tax and accounting

Special category information

If you share information about allergies, sensitivities, scalp concerns, or similar, this can be treated as health related information. We only use it to support safe service delivery, and we limit access to people who need to know. Where required, we rely on your explicit consent and you can withdraw that consent by contacting us.

Marketing

We may send you offers, news, and updates by email or text only where we have a lawful basis to do so. You can opt out at any time by using the unsubscribe option in a message, or by contacting us. Rules for electronic marketing are covered by PECR and related guidance.

Who we share your information with

We may share your information with trusted service providers who help us run the business, such as:

  • Online booking and client management systems
  • Website hosting and analytics providers
  • Email and messaging providers used for confirmations and reminders
  • Payment providers
  • Accountants and professional advisers where needed

We only share what is necessary and we expect appropriate security and confidentiality.

International transfers

Some of our service providers may store or process information outside the UK. If this happens, we will take steps designed to ensure appropriate safeguards are in place.

How long we keep your information

We keep personal information only for as long as needed for the purposes described above:

  • Appointment and client history, typically kept while you remain an active client, then for a reasonable period afterwards
  • Marketing preferences, kept until you opt out, or we stop marketing activity
  • Financial records, typically kept for up to six years to meet legal and accounting requirements

Your rights

You have rights under UK GDPR, including:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights related to automated decision making, if applicable

To exercise any of these rights, contact us using the details above. We may need to confirm your identity before responding.

You also have the right to complain to the Information Commissioner’s Office, which is the UK supervisory authority for data protection.

Cookies

Our website may use cookies and similar technologies to help the site work properly, understand how it is used, and improve performance. You can control cookies through your browser settings and, where available, any cookie controls on the site.

Security

We use reasonable technical and organisational measures to protect personal information. No method of transmission or storage is completely secure, but we aim to protect your information from unauthorised access, alteration, disclosure, or loss.

Children

Our services and website are not intended to be used by children without adult involvement. If you believe a child has provided us personal information without appropriate consent, please contact us.

Changes to this policy

We may update this privacy policy from time to time. The latest version will be available on this page, with the updated date shown at the top.