Privacy Policy

Last updated: 11 October 2026

This notice explains what personal information TopOne Hair & Beauty Salon collects about you, why, who we share it with, how long we keep it, and your rights. It covers the salon at 31 The Quadrant, this website, our booking app, and the CCTV in the salon.

Who we are

Top One Class Limited, trading as TopOne Hair & Beauty Salon, is the data controller. Company number 07989879, registered in England and Wales. Salon: 31 The Quadrant, Richmond, Surrey, TW9 1DN. Email: enquiriesrichmond@top1one.co.uk. Phone: 0208 940 6111.

When you visit this website

Browsing. Our hosting provider, Cloudflare, records basic technical details of each visit, such as your IP address, browser and the pages requested, to keep the site running and secure. These logs are kept for a short period and are not used to identify you.

Cookies. Analytics and advertising cookies are only set if you accept them in the cookie banner. They let Google Analytics count visits, Google Ads measure whether adverts lead to bookings, and Microsoft Clarity show us how visitors move around a page (Clarity records mouse movement and clicks, with anything you type masked). You can change your choice at any time on our cookie policy page.

Booking online. When you press Book now you leave our site and book through Phorest, the salon's booking system. Phorest collects your name, contact details and appointment, and any deposit or card details go to Phorest's payment provider, never to us. Deposits, cancellations and reminders are handled by Phorest under its own privacy policy. We see the booking in our salon system.

Contacting us. If you email, call or message us, we keep your name, contact details and message for as long as we need them to reply and to keep a record of what was agreed.

When you visit the salon

Client records. We keep a record card for each client with your name, contact details, the services you have had, colour formulas, patch-test results, and anything you tell us about allergies, skin conditions, medication or pregnancy that affects how we can treat you. Health details count as special category data: we ask for your consent before recording them and use them only to treat you safely.

How long. Client records are kept while you are a client and for up to seven years after your last visit, which our insurers require for treatment records. After that they are deleted.

Photos. We only photograph your hair or treatment results with your permission, and only use a photo on our website or social media if you have agreed to that in writing. You can withdraw that permission at any time by emailing us and we will take the photo down.

CCTV

The salon has CCTV inside the premises for the safety of clients and staff and to protect against theft. Signs show you where the cameras are. Recordings are kept for around 30 days and then overwritten, unless we need to keep a clip for an incident, in which case it may be shared with the police or our insurers. Our lawful basis is our legitimate interest in keeping people and property safe.

The TopOne app

If you use our booking app, we collect your email address, your password (stored only as a secure hash that we never see), your name, phone number and the enquiries you send. We do not collect your location, contacts, photos or camera, and the app carries no advertising or tracking. You can browse it as a guest without an account.

The app runs on Supabase (database and sign-in, held in the United Kingdom) and Resend (account and password emails, processed in the United States under their data processing terms). Enquiries closed by the salon are deleted after 14 days; open ones 90 days after the last message. Once staff enter your appointment into Phorest, that booking record is kept under the salon's rules above. You can delete your account at any time in the app under Profile, then Delete Account, or follow our account deletion page.

Who we share your information with

We do not sell your information. We share it only with the companies that provide a service for us and act on our instructions: Phorest (bookings), Cloudflare (website hosting), Google and Microsoft (analytics and advertising, only with your cookie consent), Supabase and Resend (the app), and our insurers, accountants or the police where the law requires it.

The legal basis

We rely on contract to provide the service you booked, legal obligation to keep the treatment records our insurers and the law require, legitimate interests to run the salon, the website and CCTV, and consent for health details on your record card, for photos and for cookies. Where we rely on consent you can withdraw it at any time.

Your rights

You can ask for a copy of the information we hold about you, have it corrected or deleted, restrict or object to how we use it, or have it transferred elsewhere. Email enquiriesrichmond@top1one.co.uk and we will respond within one month. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

We cut children's hair with a parent or guardian present, and the record is kept under the parent's name. The app is not intended for children under 13 and we do not knowingly collect their information.

Changes to this notice

We will update the date at the top of this page when it changes and, where the change is significant, tell app users in the app.