Privacy Policy

Last updated: 05 January 2026

1. Who We Are

LUNA Hair & Lash Lounge (“we”, “us”, “our”) is a UK-based hair and lash salon operating in Bracknell.

Data Controller:

LUNA Hair & Lash Lounge

Phone: 0843 289 1119

We are the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect

We may collect and process the following personal data:

Contact Information

First name and last name
Email address
Telephone number

Booking Information

Appointment details
Service preferences
Consultation notes
Communication relating to your booking

Payment Information

Billing information required for payment processing
Transaction details

Payment card details are processed securely by our payment provider and are not stored by us.

Technical Information

IP address
Browser type
Device information
Website usage data via cookies

3. How We Use Your Information

We use your personal data for the following purposes:

To manage and confirm appointments
To provide salon services
To process payments and deposits
To communicate regarding bookings or changes
To respond to enquiries
To comply with legal and tax obligations
To improve our website and services

We do not sell your personal data.

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Contractual necessity – To provide the services you book with us.

Legitimate interests – To manage appointments and operate our business efficiently.

Legal obligation – To comply with financial and regulatory requirements.

Consent – Where you opt in to marketing communications.

5. Marketing Communications

We will only send marketing communications if you have explicitly opted in.

You may withdraw consent at any time by:

Clicking unsubscribe in emails, or
Contacting us directly.

6. Data Sharing

We may share your data with trusted service providers strictly for business operations, including:

Wix (website hosting and booking system)
Payment processors (e.g. Wix Payments / Stripe)
Accounting providers
IT and website support providers

All third parties are required to handle your data securely and in accordance with UK GDPR.

We do not sell or rent your personal data to third parties.

7. Data Storage and Security

Your information is stored securely using industry-standard security measures.

We take reasonable technical and organisational steps to protect your personal data from loss, misuse, unauthorised access or disclosure.

8. Data Retention

We retain personal data only as long as necessary to:

Provide services
Comply with legal or tax obligations
Resolve disputes

Typically, booking and financial records are retained for up to 6 years in line with UK accounting requirements.

9. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate information
Request erasure of your data (where legally permissible)
Restrict or object to processing
Request data portability
Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: www.ico.org.uk

To exercise your rights, please contact us at info@thelunalounge.co.uk.

10. Cookies

Our website uses cookies to enhance user experience and analyse website traffic.

You can manage cookie preferences via your browser settings.

For more information, please refer to our Cookie Policy [if separate].

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices.

The latest version will always be available on our website.

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us at info@thelunalounge.co.uk.

LUNA