Iconic

(Iconic "we," "us," "our") are committed to protecting your privacy. There are various ways that you might interact with Iconic and the information you provide when doing so allows us to improve our services.
This website, our related websites and any mobile site or mobile application that link to this Privacy Policy (collectively, the "Site", "Sites") are owned and operated by Salon Software Solutions Ltd with its principal place of business at Kingsley Road, Lincoln, LN6 3TA.
Salon Software Solutions Ltd operates as a data processer on behalf of Iconic the data controller.

Our privacy policy explains:

This Privacy Policy applies to Iconic and its subsidiaries and affiliates and covers our processing activities as a data controller.
The Site is not intended for or directed at children under the age of 13 years. As such, this Site is designed for adult user interaction. We do not intentionally collect personally identifiable information from children under the age of 13.
We are not required to appoint a formal data protection officer under data protection laws. However, we have appointed a Data Protection Contact who you can reach out to about any queries you may have in relation to this Privacy Policy. If you are located in the EEA, you can contact our representative(s) in the EEA about any data protection queries, using the contact details below.

Contacting Us

If you have any questions about our Privacy Policy or your information, or to exercise any of your rights as described in this Privacy Policy or under data protection laws, you can contact us as follows:

In the EEA

By post: 63 High Street, Evesham, Worcestershire, WR11 4DA
By telephone: 01386 41117
By email: iconichairdressing@hotmail.co.uk

Topics

Information we collect
How We Use Information
Marketing
Opting Out
Change of purpose
Salon Software Solutions as data processor
Disclosure of your personal data to third parties
Security of your personal data
Data retention: How long we keep your personal data
Your rights
Your right to object
Exercising your rights
Use of Cookies, IP Addresses and Aggregate Information
Social Media and Online Engagement
Complaints
Changes to this Policy

Information we collect

Information you give us

We may collect or record basic personal information which you voluntarily provide through completing forms on this Site, through electronic mail you send to us, or through other means of communication between you and us. The categories of personal information you provide may include:

We do not generally seek to collect sensitive personal information (e.g. social security or other governmental ID numbers, credit card details and account numbers, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership; health or sex life, sexual orientation; genetic or biometric information) through this Site and if we do we will ask for your explicit consent to our proposed use of that information at the time of collection. This information will be collected, stored, accessed and processed in a secure manner.

Information we collect from you

We collect, store and use information about your visits to this Sites and about your computer, tablet, mobile or other device through which you access this Site. This includes the following information:

How We Use Information

As a data controller, we will only use your personal information if we have a legal basis for doing so. The purpose for which we use and process your information and the legal basis on which we carry out each type of processing is explained in the table below.
Note that we may process your personal data for more than one lawful ground if the data is used for several purposes. Please Contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

Purposes for which we will process the information Type of data Legal Basis for the processing
To provide you with information and materials that you request from us. (a) Identity
(b) Contact
It is in our legitimate interests to respond to your queries and provide any information and materials requested in order to generate and develop business. To ensure we offer an efficient service, we consider this use to be proportionate and will not be prejudicial or detrimental to you.
To personalise our services and products and this Site to you. (a) Identity
(b) Contact
(c) Technical
It is in our legitimate interests to improve the Site in order to enhance your experience on our Site, to facilitate system administration and better our services. We consider this use to be proportionate and will not be prejudicial or detrimental to you.
If you do not wish to receive tailored or personalised information from us based on personal information you have provided us, please contact us as provided in "Contacting Us" above.
To update you on services and products and benefits we offer. (a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Marketing and Communications
(f) Technical
It is in our legitimate interests to market our services and products. We consider this use to be proportionate and will not be prejudicial or detrimental to you.
If you would prefer not to receive any direct marketing communications from us, you can opt-out at any time by contacting us as providing in "Contacting Us" above.
For direct marketing sent by email to new contacts (i.e. individuals who we have not previously engaged with), we need your consent to send you unsolicited direct marketing.
To send you information regarding changes to our policies, other terms and conditions and other administrative information. (a) Identity
(b) Contact
(c) Technical
(d) Usage
(e) Profile
It is in our legitimate interests to ensure that any changes to our policies and other terms are communicated to you. We consider this use to be necessary for our legitimate interests and will not be prejudicial or detrimental to you.
To administer this Site including troubleshooting, data analysis, testing, research, statistical and survey purposes;
To improve this Site to ensure that consent is presented in the most effective manner for you and your computer, mobile device or other item of hardware through which you access this Site; and
To keep this Site safe and secure.
(a) Identity
(b) Contact
(c) Technical
(d) Usage
(e) Profile
For all these categories, it is in our legitimate interests to continually monitor and improve our services and your experience of this Site and to ensure network security. We consider this use to be necessary for our legitimate interests and will not be prejudicial or detrimental to you.
To measure or understand the effectiveness of any marketing we provide to you and others, and to deliver relevant marketing to you. (a) Identity
(b) Contact
(c) Technical
(d) Usage
(e) Profile
It is in our legitimate interests to continually improve our offering and to develop our business. We consider this use to be necessary in order to effectively generate business and will not be prejudicial or detrimental to you.
To enforce the terms and conditions and any contracts entered into with you. It is in our legitimate interests to enforce our terms and conditions of service. We consider this use to be necessary for our legitimate interests and proportionate.

If you do not wish to provide us with your personal data and processing such data is necessary for the performance of a contract with you and to fulfil our contractual obligations to you, we may not be able to perform our obligations under the contract between us.
Where you provide consent, you can withdraw your consent at any time and free of charge, but without affecting the lawfulness of processing based on consent before its withdrawal. You can update your details or change your privacy preferences by contacting us as provided in "Contacting us" above.
Where we rely on legitimate interests as a lawful basis, we will carry out a balancing test to ensure that your interests, rights and freedoms do not override our legitimate interests. If you want further information on the balancing test we have carried out, you can request this from us by Contacting us.

Marketing

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

Opting out

You can ask us to stop sending you marketing messages at any time by logging into the online Preferences centre and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you or by Contacting us at any time.

Change of purpose

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you in a timely manner and we will explain the legal basis which allows us to do so.

Salon Software Solutions Ltd as data processor

Salon software Solutions Ltd operate as a data processor and collect and process personal information on behalf of the data controller in the provision of our services and products. In these circumstances, Salon Software Solutions is acting as a data processor and we remain the data controller in respect of personal information they provide.
We remain the data controller with respect to any customer information that they provide for the provision of services. To the extent that they are acting as data processor, they therefore act in accordance with the instructions of the data controller regarding the collection, processing, storage, deletion and transfer of customer information, as well as other matters such as the provision of access to and rectification of customer data. They will only use such personal information for the purposes of providing the services and products for which we have engaged them.
The data controller is responsible for ensuring that these individuals’ privacy is respected, who their personal information is being shared with and processed by.
As a data processor, they may share personal information where instructed by the data controller. Where authorised by the data controller, they may also share personal information with third party service providers who work for us and who are subject to security and confidentiality obligations.
Salon Software Solutions Ltd is acting as a data processor, they will refer any request from an individual for access to personal information which they hold about them to the data controller. They will not respond directly to the request.
They will retain personal information which they process on behalf of the data controller for as long as needed to provide services and products to the data controller and in accordance with any agreement in place with the data controller.

Disclosure Of Your Personal Data To Third Parties

We will not sell, rent, lease or otherwise share your personal information other than as outlined in this Privacy Policy or without obtaining your consent beforehand.

Internal third parties

We may share your personal information with our group companies, affiliates, subsidiaries or contractors as necessary to carry out the purposes for which the information was supplied or collected (i.e. to provide the services and products you have requested from us).

External third parties

Personal information will also be shared with our third-party service providers and business partners who assist with the running of this Site and our services and products including [hosting providers, email service providers and SMS providers. Our third-party service providers and business partners are subject to security and confidentiality obligations and are only permitted to process your personal information for specified purposes and in accordance with our instructions.
We may also post links to third party websites as a service to you. These third-party websites are operated by companies that are outside of our control, and your activities at those third-party websites will be governed by the policies and practices of those third parties. We encourage you to review the privacy policies of these third parties before disclosing any information, as we are not responsible for the privacy policies of those websites.
In addition, we may disclose information about you when we believe, in good faith, that such use or disclosure is reasonably necessary to:

Security of Your Personal Data

The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it.

We use appropriate measures to safeguard personally identifiable information, which measures are appropriate to the type of information maintained and follows applicable laws regarding the safeguarding of any such information under our control. In addition, in some areas of this Sites, they may use encryption technology to enhance information privacy and help prevent loss, misuse, or alteration of the information under our control. We also employ industry-standard measures and processes for detecting and responding to inappropriate attempts to breach our systems.
No method of transmission over the Internet, or method of electronic storage, can be 100% secure. Therefore, we cannot guarantee the absolute security of your information. The Internet by its nature is a public forum, and we encourage you to use caution when disclosing information online. Often, you are in the best situation to protect yourself online. You are responsible for protecting your username and password from third party access, and for selecting passwords that are secure.

If you have any questions about security on this Site, you can contact us as provided in "Contacting us" above.

Data Retention: How Long Do We Keep Your Personal Data

When you contact us, we may keep a record of your communication to help solve any issues that you might be facing. Your information may be retained for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirement.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us by contacting us.

Your rights

Subject to certain limitations, you have rights under data protection laws in relation to your personal data. These rights include the rights to:

Your Right To Object

Direct marketing

You have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Where we process your information based on our legitimate interests.

You also have the right to object, on grounds relating to your particular situation, at any time to processing of your personal information which is based on our legitimate interests. Where you object on this ground, we shall no longer process your personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Exercising Your Rights

If you wish to exercise any of the rights set out above, including withdrawing consent, please contact us giving us specific details regarding which right you choose to exercise.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Please direct any questions about your information to the Data Protection Contact identified above.

Use of Cookies, IP Addresses and Aggregate Information

Cookies

In order to improve this Site, we may use small files commonly known as "cookies". Cookies are a technology that can be used to help personalize your use of a website. A cookie is a small amount of data which often includes a unique identifier that is sent to your computer or mobile phone (your "device") from this Sites and is stored on your device’s browser or hard drive. The cookies we use on this Sites won't collect personally identifiable information about you and we won't disclose information stored in cookies that we place on your device to third parties.

To enable us to assess the effectiveness and usefulness of this Site, and to give you the best user experience, we collect and store information such as pages viewed by you, your domain names and similar information. Our Site makes use of anonymous cookies for the purposes of:

By continuing to browse this Site, you are agreeing to our use of cookies.

If you don't want us to use cookies when you use this Site, you can set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it or decline at any time. However, if you block cookies some of the features on this Site may not function as a result.

You can find more information about how to do manage cookies for all the commonly used internet browsers by visiting https://www.allaboutcookies.org. This website will also explain how you can delete cookies which are already stored on your device.

We currently set the following cookies:

Cookie Purpose
.AspNet.ApplicationCookie Login and authentication
.AspNet.TwoFactorRememberBrowser Login and authentication
cookie-consent-v2 Remember cookie consent
__requestverificationtoken Protect against cross-site request forgery.

Cookies from third parties

We currently use the following third party cookies:

Third Party Cookies Purpose Link
Google Analytics Website traffic analysis https://policies.google.com/privacy
Google reCAPTCHA Security and verification https://policies.google.com/privacy
Facebook Login and authentication http://www.facebook.com/policy.php
Stripe Payments https://stripe.com/cookies-policy/legal

We use "Google Analytics" on this Site. This cookie provides us with a visitor count and an understanding of how visitors move around and use this Site. We can then use this information to improve navigability on this Site generally. The cookies we use on this Sites won’t collect personally identifiable information about you and we won’t disclose information stored in cookies that we place on your device to third parties.

We are obliged by Google Analytics to state the following:

This Sites use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help this Site analyse how users use the Site. The information generated by the cookie about your use of this Site (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of this Sites, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this Site. By using this Site, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

IP Addresses and Aggregate Information

An Internet Protocol ("IP") address is associated with your computer’s connection to the internet. We may use your IP address to help diagnose problems with our server, to administer this Site and to maintain contact with you as you navigate through the Site. Your computer’s IP address also may be used to provide you with information based upon your navigation through this Site.
Aggregate information is used to measure the visitors’ interest in, and use of, various areas of this Site and the various programs that we administer. We will rely upon aggregate information, which is information that does not identify you, such as statistical and navigational information. With this aggregate information, we may undertake statistical and other summary analyses of the visitors’ behaviours and characteristics. Although we may share this aggregate information with third parties, none of this information will allow anyone to identify you, or to determine anything else personal about you.

Links

The Site may, from time to time, contain links to and from the websites of our business partners, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.

Social Media and Online Engagement

We occasionally use a variety of new technologies and social media options to communicate and interact with customers, potential customers, employees and potential employees. These sites and applications include popular social networking and media sites, open source software communities and more. To better engage the public in ongoing dialog, certain of our businesses use certain third-party platforms including, but not limited to, Facebook, Twitter and LinkedIn. Third-Party Websites and Applications (TPWA) are Web-based technologies that are not exclusively operated or controlled by us. When interacting on those websites, you may reveal certain personal information to us or to third parties. Other than when used by our employees for the purpose of responding to a specific message or request, we will not use, share, or retain your personal information.

Complaints

You have the right to make a complaint at any time with a supervisory authority, in particular in the EU (or EEA) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/ or telephone: [0303 123 1113].

If we receive formal written complaints, we will follow up with the person making the complaint. We work with the appropriate regulatory authorities to resolve any complaints that cannot be resolved directly. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Changes to this Policy

We regularly review our compliance with our privacy policy. We also adhere to several self-regulatory frameworks in addition to complying with applicable law.

We may change this privacy policy from time to time. If this privacy policy changes, the revised privacy policy will be posted at the "Privacy Policy" link on this Site’s home page. In the event that the change is significant or material, we will notify you of such a change by revising the link on the home page to read "Newly Revised Privacy Policy." Please check the privacy policy frequently. Your continued use of this Site constitutes acceptance of such changes in the privacy policy, except where further steps are required by applicable law. This privacy policy was last updated on the date set out at the end of the policy.