Opens in a new tab

Privacy & Cookie Policy

Last updated: 30 September 2026

This policy explains how Maureen’s London collects, uses and protects your personal information when you use our website, contact us or book with us. We keep it short and plain on purpose.

Who we are

Maureen’s London is a hair salon run by Maureen as a sole trader. Maureen is the “data controller”, which means we decide how and why your personal information is used.

What we collect and why

We only collect what we need. Here is what that looks like in practice.

Booking and enquiries

When you message us on WhatsApp, call, or email, we receive your name, contact details and whatever you tell us about the appointment you want (for example the style, date and time). We use this to reply, arrange your appointment and provide the service.

Lawful basis: contract (taking steps at your request before, or to carry out, a booking) and our legitimate interests in running and responding to enquiries about our business.

Online course purchases and member accounts

If you buy our online braiding course, we collect your name, email address and billing details, and we create a member account with a password so you can access the course. Payment is taken by our payment provider, and we do not see or store your full card number.

Lawful basis: contract (to sell you the course and give you access) and legal obligation (we must keep accounting and tax records).

Photos, videos and testimonials

We may take photos or videos of your hair and share them on our website and social media (such as Instagram). We may also publish customer testimonials, usually with a first name only. We do this only with your permission, and you can ask us to remove any photo, video or testimonial at any time.

Lawful basis: consent. You can withdraw it whenever you like.

Website visits

We use privacy-friendly, cookieless analytics to understand how the site is used (for example which pages are popular). These tools do not use cookies and do not collect personal data that identifies you. See the “Cookies” section below.

Lawful basis: legitimate interests in keeping our website working well and improving it.

Where your information is stored and who we share it with

We do not sell your personal information. We only share it with the services we use to run the business:

  • Hostinger, our website host: our website and its data, including member account details, are hosted with Hostinger.
  • SureCart: the checkout system we use to sell the online course.
  • Stripe: processes card payments for course purchases.
  • Meta (WhatsApp): if you contact or book with us through WhatsApp, your messages pass through WhatsApp, which is operated by Meta. Meta’s own privacy policy applies to those messages.
  • Google: our reviews link takes you to our Google Business Profile. If you follow it, Google’s privacy policy applies. We also link to Google Maps for directions, but we do not embed it on our site.

Some of these providers may process information outside the UK. Where they do, they are responsible for having appropriate safeguards in place. We may also share information if the law requires us to.

Cookies

In short: the website sets no cookies for ordinary visitors, and we do not use advertising or tracking cookies.

  • Analytics: we use Rybbit and Independent Analytics. Both are cookieless. Independent Analytics runs as a WordPress plugin and stores its data on our own server.
  • Strictly necessary cookies: a small number are set only if you log in to a member account or buy the course. They keep you logged in and keep the cart and checkout secure.

Strictly necessary cookies are exempt from the consent requirement under the Privacy and Electronic Communications Regulations (PECR), so we do not show a cookie banner. You can clear or block cookies in your browser settings, but the login and checkout may not work without them.

How long we keep your information

  • Booking and contact messages: for as long as needed to provide our services, and for up to 2 years after your last appointment.
  • Purchase records: 6 years, as required for HMRC.
  • Course member accounts: until you ask us to delete them.
  • Photos, videos and testimonials: until you ask us to remove them.

Your rights

Under UK GDPR you have the right to:

  • ask for a copy of the personal information we hold about you (access);
  • ask us to correct anything that is wrong or incomplete (rectification);
  • ask us to delete your information (erasure), where the law allows;
  • ask us to restrict how we use your information;
  • object to our use of your information where we rely on legitimate interests;
  • ask for your information in a portable format (portability), where it applies; and
  • withdraw your consent at any time, for example for photos or testimonials.

To use any of these rights, email me@maureensldn.com or call or WhatsApp 07951 524902. We will normally reply within one month. We may need to check your identity first.

Complaints

We would like the chance to put things right, so please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at https://ico.org.uk/make-a-complaint/.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed, and the latest version is always on this page.