Privacy Policy

Last updated: May 2026

Layla's Beauty & Hair Salon ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This policy explains what data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR).

1. What data we collect

Enquiry form — When you use the "Send Enquiry" form on our website, we collect your name, email address, phone number (optional), preferred service, preferred date and time, and any additional notes you provide. This is used solely to respond to your enquiry and confirm your appointment.

AI chat assistant — Messages you send through our chat assistant are transmitted to Anthropic (the makers of Claude AI) to generate a response. Messages are not stored on our servers and are not linked to your identity. Anthropic's own privacy policy applies to this processing: anthropic.com/privacy.

Google Analytics — If you accept cookies, we use Google Analytics (GA4) to collect anonymous data about how visitors use our website: pages visited, time on site, approximate location (city level), device type, and referral source. This data does not identify you personally. If you decline cookies, Google Analytics is not loaded.

Session storage (chat history) — Your chat history is stored temporarily in your browser's session storage so your conversation is remembered while you have the tab open. This data stays on your device and is automatically cleared when you close the tab — it is never sent to our servers.

Online booking (Fresha) — When you book an appointment via Fresha, your data is collected and processed by Fresha under their own privacy policy: fresha.com/privacy-policy.

2. Legal basis for processing

• Enquiry form data — Legitimate interest: to respond to your enquiry and arrange your appointment.
• Google Analytics — Consent: only loaded after you accept cookies.
• AI chat — Legitimate interest: to provide an automated assistant that helps answer your questions.

3. How long we keep your data

• Enquiry emails — Retained in our email inbox until manually deleted. We aim to clear old enquiries within 12 months.
• Google Analytics data — Retained for 14 months by default, per Google's standard settings.
• Chat messages — Not retained on our side. Anthropic's retention policies apply.
• Session storage — Cleared automatically when you close the browser tab.

4. Who we share your data with

We do not sell your data. We share data only with the third-party services named above that are necessary to operate our website:

• Anthropic — AI chat processing
• Google Analytics — Anonymous website analytics (consent-gated)
• Fresha — Online appointment booking
• Vercel — Website hosting (no access to personal data beyond server logs)

5. Cookies

We use the following cookies and similar technologies:

• cookie_consent — Stores your cookie preference (accepted or declined). Saved in your browser's local storage. No expiry — persists until you clear your browser data.
• Google Analytics cookies (_ga, _ga_*) — Only set if you accept cookies. Used to distinguish visitors and track sessions anonymously. Expires after 2 years.

You can withdraw your consent at any time by clearing your browser's local storage or cookies for this site.

6. Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Object — object to processing based on legitimate interest
• Withdraw consent — withdraw cookie consent at any time
• Complain — lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled

To exercise any of these rights, contact us at info@laylasbeautysalon.co.uk. We will respond within 30 days.

7. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version. We recommend checking back periodically.

8. Contact