Just like you, the OLIVER’S team shops online for personal and business products, providing our data so that those transactions can be properly fulfilled and signing up to marketing initiatives so we can be kept up-to-date about new products and offers. We also provide our own data to service providers so they can hold our details, manage our appointments and bookings with them. We don’t want our data to be misused so we promise to not misuse yours either.
For all our services, the data controller, responsible for your data privacy, is:
Company: Oliver’s Mcr Limited
Registered Address: Unit 2, Tilson Road, Manchester, M23 9GF (Registered in England, registration 13549546)
Correspondence Address: Oliver's Mcr Limited, 203 Ashley Rd, Hale, Altrincham WA15 9SQ
If you have any questions about how we protect your privacy and use your data, please contact us in any of the above ways.
1. Our Lawful Basis for Processing Your Data
2. Using Your Data
3. Sharing Your Data
5. Keeping Your Data
6. Your Rights
1. OUR LAWFUL BASIS FOR PROCESSING YOUR DATA
Under General Data Protection Regulations, we have two lawful bases to process your data:
For operational contractual purposes (ie to complete your service), we have a contractual lawful basis to process your data. For example, we cannot confirm an appointment with you if we don’t have your name and phone number.
For the purposes of marketing (eg e-mail, SMS promotions), we have a consensual lawful basis to process your data. You can opt-in and out of specific marketing initiatives, you are in charge, providing and removing your consent whenever you wish.
2. USING YOUR DATA
YOUR PERSONAL DATA
This includes your name, address, phone number, and e-mail address.
We gather sensitive or special category data such as your date of birth and gender, but only if you provide it when you register a booking.
How and Why We Use Your Personal Data
Under a contractual lawful basis for processing your data:
To manage your appointments: so we know you have booked, we can confirm an appointment with you, and we can contact you if the appointment needs to be moved. Therefore, we can both be organised and ready for your service.
To send you a gift voucher: we use your e-mail address to send you an electronic gift voucher if you are lucky enough for someone to purchase one for you.
To send you service messages: so we can e-mail and/or SMS you an appointment reminder and/or a receipt.
Under a consensual lawful basis for processing your data (ie where you have provided consent):
To send you marketing messages by e-mail or SMS, according to your preferences, such as details of new services, or any special offers. We only do this when you opt-in, providing us with consent. You can remove consent at any time. Please see section 4 Marketing below.
To display adverts as you surf the web. This lets you see information about new products & services or special offers. We only do this if you have cookies enabled on your browser so you can stop this by clearing your browser cookies.
If you provide your date of birth, we know when it’s your birthday, so we can pay you some special attention on that date. But it’s entirely your choice, whether you provide a date of birth. If you do, that is your ‘consent’.
YOUR COMMUNICATION DATA
This includes e-mails you have sent us, messages sent through our booking system, messages on social media, and phone calls. We do not currently record phone calls. We keep e-mails for 12 months. We are unable to delete social media messages as these are kept by those respective platforms, which have privacy settings that can be changed.
How and Why We Use Your Communication Data
To provide customer service and support – we need to answer your inquiries and we need to communicate with you or you will think us terribly rude.
To train staff – we need to use inquiries to train our staff so they can provide the great service you expect from OLIVER’S™.
YOUR PAYMENT DATA
This includes your payment history and any gift card balances.
We do not hold any payment card details. When you input payment details on our Phorest booking system, or make payment at a Salon, it is fully encrypted and operated by our payment processor, Stripe, who holds all the necessary SSL security certificates to keep your payment details secure.
How and Why We Use Your Payment Data
To assess whether payment has successfully been taken for services and/or products, and therefore confirm that the contract is completed. Our payment provider, Stripe, processes your payment, encrypting it, and reviewing for fraud, so that we can successfully and securely take payment.
We can see your outstanding balance for any gift vouchers, which allows us to apply that balance to any future services and/or products for you.
We can see your payment history within your client account on our booking system, so we can ensure that the account is paid up to date, and review any issues you may have.
To provide refunds where necessary.
YOUR SERVICES AND/OR PRODUCT HISTORY DATA
This includes any consultation data, patch testing details, your service history, your product purchase history, and any client notes about your treatments and preferences.
How and Why We Use Your Services and/or Product History Data
To view your service and product history, so we know, for example, which services and products you prefer, and which professional you prefer. Therefore, we can tailor the service to your requirements, book you an appointment with the correct professional and use the correct products for your treatment.
To view and make client notes so that we know the specific and unique details of your treatments, for example, the colour ratio would be recorded for any hair colouring service. Therefore, we can tailor the service to your exact preferences.
To view your consultation information, so we know of any health conditions that could be affected by the service.
To record data in compliance with any COVID legislation.
To provide customer service and support. If you have a question about a previous service or product, we can review your history to follow up on your enquiry.
YOUR DEVICE AND BROWSER DATA
We cannot use your device (eg mobile, tablet, desktop) and browser data (eg the browser used, the version of that browser) to specifically identify you but we use Google Analytics to review the devices and browsers which our website visitors collectively use.
How and Why We Use Collective Device and Browser Data
To collectively review which browsers and devices our customers use to view our website, so that we can develop it, expand it, make it easier to use and ensure it is responsive to changes in devices.
To collectively review who our website visitors are – if you have enabled cookies on your browser, Google Analytics collects and reviews the geo-location, demographics, and interests that it believes you have, based upon your browser cookies and surfing habits. This helps us to better understand who our visitors are, so we can provide a better website experience in the future.
3. SHARING YOUR DATA
We do not sell any information or data to any third party ever. However, we do share your information with the following companies, who process elements of your data, often in order to fulfill our services and contract with you, to meet our legal obligations, or to provide marketing services where you have explicitly consented to this.
Phorest, our booking management system, holds your personal data, and your services and/or product history data. Phorest also holds marketing preferences if you have consented to these, and sends e-mail and SMS marketing messages according to your consent.
Stripe, our payment processor, holds, secures, processes, and encrypts your payment data.
WordPress, our e-commerce platform, holds your device and browser data.
Google Analytics, collectively holds website visitor device and browser data, and collectively uses cookie data. You can opt-out of marketing cookies and/or other cookies.
Google, Facebook, and Instagram may show you OLIVER’S™ adverts after you have left the website, using cookie data. You can opt-out of marketing cookies and/or other cookies.
Law enforcement agencies and HMRC, if and where we are required to do so by law.
Under the GDPR regulations, we have a consensual lawful basis to process your data for marketing purposes.
If you have consented to us doing so, we will send you direct marketing messages to keep you aware of our new products, special offers, exclusive deals, and developments at OLIVER’S™.
You can select which methods of direct marketing you consent to, whether that be by e-mail, SMS text, or a combination of all these. It is entirely your choice, you do not have to consent to anything.
You can change your consent to direct marketing preferences at any time, in the following ways:
You can log into your account online or on our mobile app and change your preferences
By unsubscribing on e-mails
By replying ‘STOP’ on SMS messages
By contacting us via e-mail, phone, online message, or by post
You can ask a Manager at your Salon
We will update your details within 7 days, although unsubscribing on an e-mail, SMS, on via online/mobile app account will take immediate effect.
You can select to opt-out of consent to indirect marketing, such as logging browser cookies by not accepting cookies on this website or by clearing your browser cookie history.
Ending marketing messages will not affect communications necessary to inform a contract of sale or service with you, so you will still receive communications in relation to services and orders you place because, under GDPR, we have a contractual lawful basis to process your data. Your consent is only necessary for marketing communications where, under GDPR, we have a consensual lawful basis to process your data.
5. KEEPING YOUR DATA
We will hold your data on our Phorest booking system indefinitely.
You have the right to request that we delete your data (see section 6 Your Rights). However, we may keep hold of elements of your data as required, even after you close an account or it is no-longer necessary to provide services to you, in order to meet legal or regulatory requirements. For example, under VAT legislation, we need to keep your service and order data for 10 years.
Communication data, such as e-mails and messages, are kept for 12 months and then deleted.
We will continue to provide marketing services using your data for as long as you provide consent to this. You can remove your consent at any time as detailed in section 4 Marketing.
Data sent to Google Analytics, which is associated with cookies and advertising identifiers, is retained for 38 months and then automatically deleted.
6. YOUR RIGHTS
Your rights in relation to your personal information are as follows:
The right to access the information we hold about you. Please contact us via e-mail, phone, online message, or by post to access the information we hold. We can provide a download from our Phorest booking system, which contains three spreadsheets with details of 1) all appointments 2) your client details 3) a record of all your transactions.
The right to rectification – you may request us to correct inaccurate data or complete incomplete data. You can correct or update data yourself within your online account. Or you can contact us via e-mail, phone, online message, or post to correct information.
The right to be forgotten – you may request us to delete your data from our Phorest booking system without undue delay. Please contact us via e-mail, phone, online message, or by post to have your data deleted. Once deleted, we can nolonger process or collect it.
The right to stop direct marketing messages. You can change your marketing preferences, at any time within your online account, by unsubscribing to e-mails, replying STOP to SMS messages, or by contacting us.
The right to portability – you may request us to transfer your data to another organisation. Please contact us via e-mail, phone, online message, or post to transfer elements of your data
The right to complain to your data protection regulator. Within the UK, you can complain to the Information Commissioner’s Office if you are not satisfied with a response to your rights.
The right to be forgotten – you may request us to delete your data from our Phorest booking system without undue delay. Please contact us via e-mail, phone, online message, or by post to have your data deleted. Once deleted, we can no longer process or collect it.
Cookies are small text files that can be used by websites to make a user’s experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this website. For all other types of cookies, we need your permission.
This site uses different types of cookies. Some cookies are placed by third-party services that appear on our pages.
Your consent applies to the following domains: http://www.oliversofmanchester.com.
You can remove your consent to cookies by clearing your browser cookie history. You can also change your browser settings to prevent specific or all cookies. However, this may impact your ability to use this website.