Privacy Policy

1. Who we are

This policy explains how Esquire Barbers UK (“we”, “us”), run by Pure Collective One Ltd, uses personal information about our customers and the people who visit this website, burscoughbarbershop.co.uk. We are the “controller” of that information under UK data protection law (the UK GDPR and the Data Protection Act 2018).

If you have any questions about this policy or your information, call us, email us or just ask in the shop.

2. What we collect and why

Data protection law says we need a “lawful basis” for using your information. We’ve listed the basis for each use below.

When you book online through Fresha

Our “Book Now” buttons take you to Fresha, the booking platform we use. Fresha is a separate company, and it is responsible for the details you give it to create an account and use its website and app. Please read Fresha’s privacy policy to see how it handles your information.

When you book with us, Fresha shares your booking details with us: usually your name, phone number, email address, the service and barber you chose, the time of your appointment and any notes you add. We use these to:

• manage your appointment, including changes and cancellations (lawful basis: to provide the service you’ve asked for);
• keep a simple record of your visits and how you like your hair cut, so we can do it right next time (lawful basis: our legitimate interest in looking after our customers).

Appointment confirmations and reminders are sent through Fresha. We won’t send you marketing messages unless you’ve agreed to receive them, and you can opt out at any time (lawful basis: consent).

When you phone us or walk in

If you call or pop in to book, we’ll take your name, your phone number and what you’d like done, and we may add the appointment to our booking diary on Fresha. We use this only to book you in and contact you about your appointment (lawful basis: to provide the service you’ve asked for).

While you’re in the chair

If you tell us about something like a skin condition, sensitivity or allergy so we can look after you properly, we’ll only use it for that, and we’ll only write it down with your agreement (lawful basis: your explicit consent). For children’s haircuts, we deal with the parent or guardian who books and comes along.

When you pay

We keep records of payments and sales because the law requires it for tax and accounting (lawful basis: legal obligation). Card payments, whether online or on our card machine in the shop, are processed by Fresha. Fresha handles your card details securely, and we never see or store your full card number.

Google reviews on our website

Our website shows some of the reviews customers have left for us on Google. These are reviews that are already public on Google, and the widget shows the reviewer’s Google name, profile picture and review text. We show them because they help new customers choose us (lawful basis: our legitimate interests). If you’ve reviewed us and would rather your review didn’t appear on our website, let us know and we’ll remove it. You can also edit or delete your review on Google at any time.

When you visit this website

Like almost every website, our hosting and security systems automatically record some technical information when you visit, such as your IP address, browser type, the pages you looked at and the time of your visit. This is used to deliver the website to you, keep it secure and block attacks (lawful basis: our legitimate interest in running a safe, working website). We don’t use it to identify or profile you.

This website does not have a contact form or a newsletter sign-up. We use a Meta Pixel (from Meta, the company behind Facebook and Instagram) on every page so we can measure visits and see whether our ads are working. It may set cookies and send information such as your IP address and the pages you view to Meta (lawful basis: our legitimate interest in measuring our advertising). We only use Google Analytics if you say yes to analytics cookies (see Cookies).

3. CCTV in the shop

We use CCTV cameras in the shop. Signs are displayed so you know when you’re in an area covered by cameras.

• Why we use it: for the safety and security of our staff, customers and premises, and to help prevent and detect crime.
• Lawful basis: our legitimate interests in keeping people and the shop safe. Cameras are positioned so they don’t intrude more than necessary.
• How long we keep it: footage is recorded over automatically after about 30 days, unless we need to keep a specific clip for longer, for example because of an incident or an insurance claim.
• Who we share it with: we only share footage with the police or our insurers when it’s needed, for example to investigate a crime or a claim.
• Your footage: you can ask for a copy of footage that shows you. Tell us roughly the date and time of your visit and we’ll reply within one month. We may need to blur other people in the footage to protect their privacy.

4. Who we share it with

We don’t sell or rent your information to anyone. We only use a small number of trusted services to run the shop and this website:

Service	What it does	Their privacy policy
Fresha	Online booking, appointment reminders, our booking diary and card payments (online and on our in-shop card machine)	terms.fresha.com
Hostinger	Hosts this website and keeps routine server logs	hostinger.com
Wordfence (Defiant Inc.)	Website security firewall. It checks visitors’ IP addresses to block attacks and may log them.	wordfence.com
Trustindex	Shows our Google reviews on the homepage. Your browser loads the widget from Trustindex’s servers.	trustindex.io
Google	Google Fonts (the website’s typefaces), the Google Map on our homepage, and reviewers’ profile pictures in the reviews widget. These load from Google’s servers, so Google receives your IP address.	policies.google.com
Meta (Facebook / Instagram)	Measures visits to this website and the performance of our Facebook and Instagram ads through the Meta Pixel. Meta may set cookies and receive your IP address, browser details and the pages you visit.	facebook.com/privacy/policy

We use the Yoast SEO plugin to help search engines read this website. It doesn’t track visitors.

Some of these companies, such as Google, Wordfence and Meta, are based in or process data in the United States. Where your information leaves the UK, they are responsible for protecting it with safeguards recognised under UK law. We may also share information if the law requires it, for example with HMRC or the police.

5. Cookies

Cookies are small files a website saves in your browser. We keep them to a minimum:

• Essential cookies. Our host’s network (Hostinger) sets a technical cookie called hcdn to deliver the website. It is deleted when you close your browser. WordPress and Wordfence also set login and security cookies, but only for our own staff when they log in to manage the site.
• Browser storage. WordPress saves a small note in your browser’s session storage to check whether your device can display emoji. It holds nothing about you and is cleared when you close the tab.
• Third-party content. The Google Map on our homepage is provided by Google and may set Google’s own cookies when it loads, especially if you’re signed in to a Google account. Google Fonts and the Trustindex reviews widget receive your IP address so they can send the files to your browser.
• Analytics cookies (only with your consent). If you click Accept on our cookie banner, we use Google Analytics 4, provided by Google, to see how visitors use the site. It is off unless you accept, IP addresses are anonymised and advertising features are turned off. You can withdraw consent at any time by clearing this site’s data (cookies and site storage) in your browser, and the banner will ask again.
• Advertising cookies (Meta Pixel). We use Meta’s Pixel on every page to measure how people use the website and how our Facebook and Instagram ads perform. Meta (Meta Platforms, Inc.) may set cookies and receive your IP address, browser details and the pages you visit. This loads when you visit the site, not only if you click Accept.

Analytics cookies are only set if you accept them. The Meta Pixel loads when you visit, so we can measure visits and ad performance. You can block or delete cookies in your browser settings; the website will still work, although the map may not load.

Fresha uses its own cookies when you go to its website to book. Its privacy policy explains them.

6. How long we keep it

• Customer and booking records: while you’re a customer, and for about 2 years after your last visit, unless you ask us to delete them sooner.
• Payment and sales records: six years, because tax law requires it.
• CCTV footage: overwritten automatically after a set period, unless a clip is needed for an incident (see section 3).
• Health notes (for example an allergy): only for as long as they’re needed to look after you, or until you ask us to remove them.
• Website and security logs: kept for a short time by Hostinger and Wordfence, then deleted automatically.

Fresha keeps the information in your Fresha account in line with its own privacy policy.

7. Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you and get a copy of it.
• Rectification: have anything that’s wrong or incomplete corrected.
• Erasure: ask us to delete your information, unless we have to keep it by law.
• Restriction: ask us to limit how we use your information.
• Objection: object to us using your information based on our legitimate interests, and to any marketing at any time.
• Data portability: ask for information you gave us in a format you can take elsewhere.
• Withdraw consent at any time, where we rely on your consent.

To use any of these rights, contact us on 01704 807557, by email at purecollectiveltd@gmail.com, or ask in the shop. It’s free, and we’ll reply within one month. We may need to check who you are first. For information held in your Fresha account, you can also contact Fresha directly.

8. How to complain

If you’re unhappy with how we’ve handled your information, please talk to us first and we’ll do our best to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

9. Changes to this policy

We’ll update this policy if the way we use your information changes, for example if we add a new booking system or website feature. The date at the top shows when it was last updated. If we make a significant change, we’ll make it clear on this page.