Privacy policy
Last updated 31 October 2026
This policy explains what personal information Tips & Toes collects when you use this website or visit the salon, why, and your rights under the UK GDPR and the Data Protection Act 2018.
Who we are
Tips & Toes, 161 Barking Road, London E16 4HQ, is run by [LEGAL NAME OF THE BUSINESS OWNER OR LIMITED COMPANY], the data controller. We are registered with the Information Commissioner’s Office under number [ICO REGISTRATION NUMBER]. Contact us about your data at hello@tipsandtoes.london or on 020 7476 4286.
What we collect and why
| Information | Why we use it | Lawful basis |
|---|---|---|
| Name, email, mobile number, chosen treatment, date and time, and any notes you add | To take and manage your booking, send confirmations and contact you about your appointment | Contract: you asked us to book a treatment |
| Visit history and loyalty stamps | To run the loyalty card and apply your tenth-visit discount | Contract: the loyalty terms you accept when booking |
| Your email address, if you tick the offers box | To send occasional offers | Consent, which you can withdraw at any time |
| A one-way scrambled (hashed) version of your IP address, kept for up to 24 hours | To stop spam and repeated abuse of the booking form | Legitimate interests: keeping the service secure |
| Spam-check signals from Cloudflare Turnstile | To tell people apart from automated bots | Legitimate interests: keeping the service secure |
Please don’t put health information in the booking notes. If you have an allergy or a condition that affects your treatment, tell your technician in person. We don’t store it online.
Who we share it with
We never sell your data. We use these service providers, who only process it on our instructions:
- Cloudflare hosts this website and stores booking records, runs the spam check, and forwards emails sent to our address.
- Google holds our appointment diary in Google Calendar and our Gmail inbox. If you choose to load the map, Google Maps processes your IP address under Google’s own privacy policy.
- Resend sends our booking confirmation and loyalty emails.
Some of these providers process data in the United States. Transfers are protected by the UK–US data bridge or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Bookings: 24 months after the appointment date, then deleted automatically.
- Your customer record and loyalty stamps: until 24 months after your last booking.
- Marketing consent: until you unsubscribe or ask us to delete your data.
- Hashed IP addresses used for spam protection: 24 hours.
- Loyalty card links: 30 minutes.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. Email hello@tipsandtoes.london and we will reply within one month. There is no charge.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put it right first.
How we protect it
The site is served only over encrypted HTTPS. Links in your emails use long random codes, and we store only a scrambled version of each one. Staff pages are protected by Cloudflare Access and a passcode. We limit repeated requests and block automated form spam.
Cookies
See our cookie policy.
Changes
We’ll update the date at the top of this page when the policy changes. Significant changes will be shown on the website before they take effect.