Updated October 2025 to include details on client record-keeping, insurance compliance, and personal data retention.

We receive, collect and store any information you enter on our website, during your booking form, or that you provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We also collect personally identifiable information (including name, email, password, communications); payment details, comments, feedback, product reviews, recommendations, and personal profile.

When you conduct a transaction on our website and book a service, as part of the process, we collect personal information you give us such as your name, address and email address and medical information. Your medical information is important to make sure you are suitable to have the requested service. This personal information will be used for the specific reasons stated only, and will only be accessed by Absolute Curls staff.

We collect such Non-personal and Personal Information for the following purposes:
To provide and operate the Services;

To ensure your suitability to access our services;
To provide our Users with ongoing customer assistance and technical support;
To be able to contact our Visitors and Users with general or personalized service-related notices and promotional messages;
To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we or our business partners may use to provide and improve our respective services; 
To comply with any applicable laws and regulations.

Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.  

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

We may contact you to notify you regarding a booking or your account, to troubleshoot problems with your account, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you. For these purposes we may contact you via email, telephone, text messages, and postal mail.

​

Additional Data Collection and Record Keeping

Collection of Date of Birth and Address

We collect clients’ date of birth (DOB) and address as part of our client registration and consultation process. This information is necessary for proper identification, risk assessment, treatment planning, insurance compliance, and in the event of an insurance claim. You may be asked to provide this information before receiving certain services.

Retention of Client Records

We retain all client records — including name, date of birth, address, medical or allergy history, treatment records, and consent forms — for a minimum of seven (7) years from the date of the last treatment (or, in the case of minors, for seven years after the client reaches legal adult age). After this period, data may be securely anonymised or deleted, except where required to retain further by law or insurer.

Disclosure to Insurers / Third Parties

We may disclose client information — including date of birth, address, treatment records, or medical notes — to our insurers, legal advisors, or regulatory authorities when required, particularly in support of insurance claims or legal defenses. We will limit the data disclosed to only what is necessary.

Minors / Parental Consent

If the client is under 18 years old, we will obtain consent from a parent or legal guardian before collecting or processing personal data and before carrying out any services. This consent form and related records are kept in line with our record retention policy.

Security Measures

We implement appropriate technical and organisational measures to safeguard your personal data, including encryption, secure servers, restricted access, staff training, regular backups, and secure disposal when no longer needed.

Client Rights & Complaints

If you have any concerns about how we handle your personal data, please contact us at info@absolutecurls.com or in writing at Absolute Curls, 66 Town Street, Horsforth, Leeds, LS18 4AP. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.

If you don’t want us to process your data anymore, please contact us at info@absolutecurls.com or send us mail to: Absolute Curls, 66 Town Street, Horsforth, Leeds, LS18 4AP.

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. 

If you would like to: access, correct, amend or delete any personal information we have about you, you are invited to contact us at info@absolutecurls.com or send us mail to: Absolute Curls, 66 Town Street, Horsforth, Leeds, LS18 4AP.