Privacy Policy

Who are we?

The data controller in respect of this website is MAW Salons Ltd, Company No: 04533197 Registered in England & Wales | 1 Park Rd, Hampton Wick, Kingston upon Thames, Surrey KT1 4AS

Your Personal Data

Personal data is data that can be used to identify an individual. For example your name, email address, home address and even IP address. We collect and process personal data in compliance with the General Data Protection Regulation, and will never share it with third party marketers.

How your personal data is collected on this website by us and by third parties

Our contact form
When you use our contact form to contact us, we require your name and email address in order to reply to you. When you click the submit button on the contact form, your message and contact details are sent to us via email and are stored in our email system.

Gift voucher purchases
When you make a purchase or attempt to make a purchase through our gift voucher websites, we collect your name, billing address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information” and it is retained in our website databases and offline, to fulfil your order and for accountancy purposes.

Subscription to classes with Mindbody
When you register to attend any classes in our studio, your personal information and payment details are processed by Mindbody Inc, who comply with the EU-US Privacy Shield. You can read their privacy policy here.

Mailgun Technologies, Inc
To improve the reliability of sending email from our website to our mail server, we use Mailgun Technologies, Inc, who are based in the USA and are participants in the EU-US Privacy Shield Framework. Mailgun will retain your IP address and all data included in your contact form messages and emails relating to purchases in log files on their server. This data is retained only for the purposes of delivering the email and providing us with information should there be a problem with the delivery. It will not be shared with third parties for marketing purposes.

Mailchimp Mailing List Subscription
If you choose to subscribe to our mailing list, the data you enter during the sign-up process will be sent to Mailchimp (The Rocket Science Group, LLC), which we use to manage email marketing subscriber lists and send emails to our subscribers. You can read their privacy policy here:
https://mailchimp.com/legal/privacy/

Should you wish to unsubscribe from our mailing list, you can do so at any time by clicking the “unsubscribe” link in any of the email campaigns you have received from us. Or if you prefer you can contact us to request that we unsubscribe you.

Comments on our blog
When you comment on a blog post on our website, we require you to give your email address and user name to allow us to identify you as a trusted user. This helps us to avoid publishing spam comments.

PayPal
Please note that when you buy e-gift vouchers, we do not collect or process your credit or debit card details. These are however collected and processed by our payment processing service provider, PayPal (Europe) S.à r.l. et Cie, S.C.A. (“PayPal”). The collection and processing by PayPal of your credit or debit card details and other personal data are governed by their terms and conditions. See https://www.paypal.com/uk/webapps/mpp/ua/privacy-full for more information. PayPal may from time to time provide us with information regarding the credits and debits made to your card in order to enable us to reconcile our accounts.

Cookies

A cookie is a tiny data file that is used to store information. Most websites use cookies for a number of purposes, including providing essential functionality (e.g. a shopping cart), providing useful information about the way in which the website is being used (e.g. analytics), for marketing purposes, and for many other functions such as enhanced security.

By continuing to use this website, you accept that we use the following cookies:

Google Analytics
We use Google Analytics to provide us with information about how our website is used, such as what countries our visitors are browsing from, and what pages are the most popular. The data gathered is anonymous and can not be used to identify individual users.

You may block the collection of the data related to your use of this and all other websites, as well as the processing of this data by Google, by downloading and installing a browser plugin available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Google ReCAPTCHA
ReCAPTCHA is a service provided by Google that allows us to confirm that only real people and not spambots are able to submit our contact forms. When you tick the box that says “I’m not a robot”, Google place a cookie called NID in your browser, that communicates information such as what language your browser is set to, the date, how many mouse clicks you have made on the screen, and what other Google cookies you may have on your device.
https://developers.google.com/recaptcha

Google Maps and Google Fonts
We use Google Maps API from Google Inc. (1600 Amphitheatre Parkway, Mountain View, California, 94043; “Google”) for the purposes of providing information to help you to find us.

We use Google Fonts API to provide the font faces we use on this website.

When you use our website, some data, including your IP address, will be transferred to and stored on Google’s servers in the USA. This data is used solely for the purpose of providing the service, and is not associated with other data Google may hold on you. The use of Google Maps API and Google Fonts API, as well as the relevant data transfer and processing is governed by Google Inc.’s data protection policy: http://www.google.com/policies/privacy/.

Cloudflare
We use Cloudflare as our Content Delivery Network (CDN) to improve the speed and security of our website. They use a cookie called __cfuid to identify trusted web traffic.

E-commerce
To keep track of cart data on our voucher websites, we use 3 cookies:
woocommerce_cart_hash
woocommerce_items_in_cart
wp_woocommerce_session_

The first two cookies contain information about the cart as a whole and helps us to know when the cart data changes. The final cookie (wp_woocommerce_session_) contains a unique code for each customer so that it knows where to find the cart data in the database for each customer. No personal information is stored within these cookies.

PHPSESSID – A token we set to remember your login status and basket contents.

Facebook
On this website, we have installed Facebook Pixel code. The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the data controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If while accessing this website, you are also logged in at the same time on Facebook, Facebook detects each page of our website that you visit. This information is then associated with your Facebook account.

Should you wish to, you can prevent this tracking by logging out of Facebook before browsing other websites. You can also manage your privacy preferences on Facebook via https://www.facebook.com/ads/website_custom_audiences/

Mailchimp
The newsletter sign up popup on this website sets two cookies. One is a third party cookie called mc.us14.list-manage.com that communicates statistical information to Mailchimp, our email newsletter service provider. The second is a first party cookie called MCPopupClosed, that remembers when you have closed the popup so that it knows not to show you it again.

Cookie Script
When you click “ok” on our cookie consent popup banner, a cookie called ‘cookiescriptaccept’ is set so that you will not be asked to reconfirm your acceptance for a period of time.

How to control cookies

You can control and/or delete cookies as you wish – for details, here is some more information. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.

Your rights

In accordance with UK and European law under the General Data Protection Regulation (GDPR), you have numerous rights in regards to the personal data we hold about you, including:

Right to confirmation – you have the right to know if we hold personal data that concerns you
Right to access – you have the right to view and to obtain a copy of any personal data we hold that concerns you
Right to rectification – you have the right to the correction of any inaccuracies within the personal data we hold that concerns you
Right to erasure – you have the right to have your personal data removed from our systems

Should you wish to exercise any of these rights, please contact us by email or by telephone.

You can find out more about your rights under the GDPR here.