Privacy & cookies

Who we are

This website is run by Mias Beauty Lounge Ltd, trading as Mia's Beauty Lounge, 24 High Street, Dawley, TF4 2EX. If you have a question about privacy, contact us at Miajaymccarthy2@gmail.com.

What this website collects

Browsing the site collects nothing about you. There are no accounts. Details are only collected if you book an appointment, or if you call or email us.

When you book, we collect your first name, surname, email address and phone number, the treatments and time you choose, and who you are booking with. We use them to make and manage your appointment, to email you about it, and to contact you if something changes. We rely on this being necessary to carry out the booking you asked for.

Before your visit you complete consent forms. Your answers, which can include health information, and your signature are encrypted before they are stored, and only the salon's staff can read them. We rely on your explicit consent for the health information, which you give by completing the form. We also keep the name you signed with, the type of device your browser reports, and a scrambled (hashed) version of your IP address, as evidence that you signed.

If a deposit is due, you pay it on a page run by Stripe, not on this site. Stripe handles your card details; we never see or store them. We keep a record that a payment was made, its amount, and Stripe's reference for it.

We email you about your booking: confirmation, any change or cancellation, and an aftercare email after your visit. These are part of your appointment, not marketing.

Offers and news by email

The booking form has a box, unticked, asking whether you would like offers and salon news by email. We only add you to our email list if you tick it. It is optional and does not affect your booking. Your consent is our basis for emailing you this way.

We keep a record of exactly what the box said, when you ticked it, and when you unsubscribe. Every offers-and-news email has a one-click unsubscribe link, or you can email us and we will take you off. Unsubscribing does not stop the emails about your booking. We keep your address on the list marked as unsubscribed, so we do not email you again by mistake.

Cookies

This site sets no cookies. That is why you have not been asked to accept anything.

While you pay a deposit, the booking page keeps a short note in your browser's session storage so you can come back to an unpaid booking if you change your mind. It is not a cookie, it stays in that one tab, it is never sent to us, and it disappears when you close the tab. The Stripe payment page is Stripe's own and is covered by its policy.

We measure how many people visit which pages using Vercel Web Analytics. It counts visits without cookies and without building a profile of you — no identifier is stored on your device, and we cannot tell one visitor from another, only how many there were.

Places this site sends you

Paying a deposit takes you to Stripe's payment page, and tapping the map takes you to Google Maps. Those are other companies' services, they have their own privacy policies, and what happens once you arrive is between you and them.

The site is hosted by Vercel, and gallery photographs are served by Sanity. Like any web host, they process the request your browser makes, including your IP address, in order to send the page back to you.

Who handles your details for us

Some companies handle your details on our behalf, only to provide the service. Vercel runs this website, including the booking form, from London and checks the form for automated abuse. Supabase stores the booking, consent and email-list records in a database in London. Resend sends our emails. Stripe takes deposits. Sentry receives technical error reports, with the contents of requests and any cookies removed.

Some of these companies are based outside the UK. Where a company handles your details outside the UK, it does so under the safeguards UK law requires. We do not sell your details or pass them on for anyone else's marketing.

How long we keep it

We keep your booking records, consent forms and signature, and payment records for 7 years, which is what the salon's insurance requires. For anyone under 18 at the time of treatment, that is until 7 years after their 18th birthday. Your place on the email list and the record of when you agreed and unsubscribed are kept for the same 7 years.

Your rights

Under UK data protection law you can ask us what we hold about you, ask us to correct it, and ask us to delete it. Contact us using the details above and we will respond within one month. You can withdraw your consent at any time, for example to offers and news by email. If you ask us to delete records we must keep for insurance or legal reasons, we will tell you which and why, and delete the rest.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk (opens in a new tab).

Changes

If this policy changes, the date at the top of this page changes with it.