Shields Brow & Beauty Bar

Privacy Policy

Last updated: 10 July 2026

1. Who we are

Shields Beauty Limited (trading as Shields Brow & Beauty Bar) is the data controller for the personal data described in this policy. We are a private limited company registered in England and Wales under company number 17236257, with our registered office at 59 Fowler Street, South Shields, England, NE33 1NS. We handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Questions about this policy, or anything to do with your data, can be sent to [email protected] or raised with us on 0191-455-8206.

2. What we collect

  • Booking details — your name, telephone number, email address, chosen treatment and appointment time, when you book online, by telephone, by WhatsApp, through Facebook, or in person.
  • Messages — anything you send us by email, WhatsApp, or social media, so that we can reply and keep track of what we agreed.
  • Health information relevant to your treatment — for example allergies, skin conditions, pregnancy, or patch-test results. This is special category data; we only record it with your explicit consent and only so far as needed to treat you safely.

We do not collect payment card details through this website.

3. Why we use it, and our lawful bases

  • To provide your treatment and manage your appointment (confirmations, changes, reminders) — performance of a contract.
  • To keep you safe (patch tests, allergy notes) — your explicit consent, and our obligation to provide services with reasonable care.
  • To respond to enquiries — our legitimate interest in running the salon.
  • To keep business and accounting records — our legal obligations.

We will only send you marketing if you have opted in, and you can withdraw that consent at any time.

4. Who we share it with

We never sell your data. We share it only with service providers who help us run the business:

  • Our online booking provider (Cal.com) — processes the details you enter when booking online, under its own privacy policy.
  • Our website host (Cloudflare) — serves this website and processes visitor connection data (such as IP addresses) to deliver and secure it.
  • Meta (Facebook, WhatsApp) — if you contact us or book through those platforms, your messages pass through Meta's services under Meta's own privacy policy.

Some of these providers process data outside the United Kingdom; where they do, they rely on safeguards recognised under UK law, such as adequacy decisions or standard contractual clauses.

5. How long we keep it

  • Booking and appointment records — for as long as you remain a client, and then no longer than necessary for our business and legal purposes.
  • Patch-test and treatment-safety records — for as long as needed to treat you safely and to meet our insurance requirements.
  • Accounting records — six years, as required by law.

6. Cookies

This website does not use advertising or tracking cookies, and we do not run third-party analytics. If you use the online booking widget, our booking provider may set cookies that are strictly necessary for the booking to work.

7. Your rights

Under the UK GDPR you have the right to:

  • access a copy of the personal data we hold about you;
  • have inaccurate data corrected, and incomplete data completed;
  • have your data erased in certain circumstances;
  • restrict or object to our processing in certain circumstances;
  • receive your data in a portable format;
  • withdraw consent at any time, where consent is our lawful basis.

To exercise any of these rights, contact us at [email protected]. We will respond within one month. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Changes to this policy

We may update this policy from time to time; the current version will always be published on this page with its "last updated" date.