Privacy Policy

PRIVACY POLICY
Dread or Dead UK Effective Date: 31 May 2025
Last Updated: 01 March 2026

1. Introduction
Welcome to Dread or Dead UK
Dread or Dead UK is a UK-based business specialising in custom synthetic hair extensions including curls, braids, dreadlocks and twists, as well as booking-based hair services.
We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, store and protect your personal information when you:
Visit our website
Purchase products
Book appointments
Contact us
Make payments

2. Contact Details
Business Name: Dread or Dead UK Location: United Kingdom Email: dreadordeaduk@gmail.com Phone: 07503123913
For the purposes of data protection law, Dread or Dead UK is the data controller of your personal data.

3. Information We Collect
A. Information Collected When You Make a Booking
Our booking system collects:
Full name
Email address
Phone number
Selected service
Appointment date and time
Deposit payment
This information is required to secure your booking and manage appointment scheduling and calendar availability.

B. Information Collected When You Purchase Products
When purchasing custom synthetic extensions or other products, we may collect:
Full name
Billing address
Delivery address
Email address
Phone number (if provided)
Order details

C. Payment Information
Deposits and online payments are processed securely through:
Stripe
PayPal
We do not store or have access to your full card details.
Stripe allocates approximately 1% of transaction fees toward carbon removal initiatives as part of its environmental programme.
For in-person payments, we may accept:
Bank transfer
Credit or debit card (including Visa) via SumUp
Cash

D. Website Hosting
Our website is hosted by GoDaddy.
As part of hosting and security services, GoDaddy may process limited technical data such as IP addresses and server logs to maintain website functionality and security.

E. Automatically Collected Data
When you visit our website, we may automatically collect:
IP address
Browser type and version
Device type
Pages visited
Time spent on pages
Referring website

F. Cookies
We may use cookies and similar tracking technologies to:
Ensure website functionality
Improve user experience
Analyse website traffic
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

4. How We Use Your Personal Data
We use your information to:
Process and fulfil product orders
Secure and manage bookings
Take deposits
Contact you regarding appointments
Process payments
Provide customer support
Maintain financial records for tax purposes
Comply with legal obligations
If we introduce email marketing in the future, we will only send marketing communications where you have given explicit consent, and you may unsubscribe at any time.

5. Lawful Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
Contractual necessity (to fulfil orders and bookings)
Legal obligation (tax and accounting requirements)
Legitimate interests (operating and improving our business)
Consent (for marketing communications, if applicable)

6. Sharing Your Information
We do not sell or rent your personal data.
We may share personal data with:
Stripe
PayPal
SumUp
Booking system providers
Website hosting providers (GoDaddy)
Professional advisers (e.g. accountants)
Legal or regulatory authorities where required
All third parties are required to process your data securely and lawfully.

7. International Transfers
Some third-party providers (such as Stripe or PayPal) may process data outside the United Kingdom. Where this occurs, appropriate safeguards are in place to protect your personal data.

8. Data Retention
We retain personal data only for as long as necessary to:
Fulfil orders and bookings
Maintain financial and tax records
Resolve disputes
Meet legal requirements
When no longer required, personal data will be securely deleted or anonymised.

9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against:
Unauthorised access
Loss
Misuse
Alteration
Disclosure
However, no online system can be guaranteed to be completely secure.

10. Your Rights Under UK GDPR
You have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion of your data
Restrict or object to processing
Withdraw consent (where processing is based on consent)
Request data portability
To exercise your rights, please contact us at:
dreadordeaduk@gmail.com 07503123913
You also have the right to lodge a complaint with:
Information Commissioner's Office (ICO) https://www.ico.org.uk

11. Children’s Privacy
Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.