Privacy Policy

At Nineteen Ltd, trading as Suncity19, we’re committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR). Our privacy policy explains when and why we collect personal information about people who visit our salon and website, how we use that information, the conditions under which
we may disclose information to others with your consent and how we keep information secure. We may change our privacy policy from time to time so please check our website (www.suncity19.co.uk) periodically to ensure that you’re happy with any changes. By using our salon and website, you’re agreeing to be bound by this policy. Any questions regarding this Policy and our privacy practices should be sent via our website contact form www.suncity19.co.uk or by post to 12-18 Brook Street, Daventry, Northamptonshire, NN11 4GG.

WHO ARE WE?
Our company is Nineteen Ltd, trading as Suncity19. We are a beauty salon providing treatments and products to clients in Daventry, Northamptonshire. Our registered address is 1-3 Sheaf Street, Daventry, Northamptonshire, NN11 4AA. The Companies House number for Nineteen Ltd is 05032574.

WHAT IS OUR LAWFUL BASIS FOR COLLECTING YOUR PERSONAL DATA?
Legal Obligation: We need to keep a comprehensive history of all your treatments at Suncity19 due to the possibility of any future insurance claim being made against us.
Each client that visits the salon needs to fill in a form with personal data. The only compulsory data you need to provide is your full name and current address, all other data is optional.  Information such as any allergies and your personal preferences will help us give accurate advice tailored to your needs as a client.
Contract: For clients wishing to become members at Suncity19 it is necessary to process personal data as part of specific steps required before entering into the contract.

HOW DO WE COLLECT INFORMATION ABOUT YOU?
We obtain information about you when you fill out forms in the salon, when you complete a membership contract, use our website contact form, via activity on our Facebook page, when you send us an email, call us on the telephone or send us information through the post.

WHAT TYPE OF INFORMATION IS COLLECTED FROM YOU?
The personal data we collect might include your name, address, email address, phone number and other information that you consent to provide on our forms such as any allergies etc.  For clients wishing to use the FLABeLOS machines we need to ask medical questions on the form in order to establish that it is safe for you to use. There are also medical questions for clients having nail and beauty treatments.  We keep a record of your activity at the salon so we know what treatments you have had previously.

HOW IS YOUR INFORMATION USED?
We may use your information to:
Carry out our obligations arising from any agreements or contracts entered into by you and Suncity19, usually in respect to providing treatments and services at our salon.
• Each client that visits Suncity19 will have an account held on our computers using the Salon Tracker Salon Management System, we have verified that Salon Tracker are compliant with GDPR.  Clients who wish to become members will also have a duplicate of their Ashbourne Management Services Ltd contract held on file.  If you write to us, perhaps to apply for a job or to give us feedback, we will keep the paperwork on file. If you send us emails or Facebook messages these will also be stored either on Microsoft Outlook or Facebook, both of which are compliant with GDPR.
• It is important that your personal account is secure and that no other clients can use it and potentially steal your credits if you have bought a sunbed course or hold membership points. We need to keep accurate records of your treatment history for insurance purposes. For this reason we need to hold your name and address for identification verification purposes. For enhanced security we have a finger print recognition system which we recommend for all clients that use sunbeds. The system saves enough unique information about your fingerprint to create a template so that a fingerprint reader can later identify you. Your actual fingerprint is not stored, and your actual fingerprint cannot be reconstructed from the template that is created and stored. The provider is Crossmatch and further information is available on request. Please let a member of staff know if you do not want to use this security measure, if you opt out we may need to ask further questions to identify you when you use the sunbeds.
• We log your activity at the salon in order to better serve you and help you get the correct advice. We will have a record of each time you visit the salon and what treatments/products you have bought and also any important information such as allergies etc. This information is also needed to help us provide accurate information in the event of any insurance claim being made against us.
• Clients wishing to become Members will also provide name and address details plus date of birth and bank details etc when filling out the membership contract in accordance with Ashbourne Management Services Ltd policies.  We have verified that they are compliant with GDPR.
• If you provide a contact telephone number or email address we may use this to contact you regarding appointments etc. For example we send SMS text messages to you on the morning of appointments as a reminder.
• We may also send you an email to let you know about offers available at the salon or to notify you of any relevant changes to our services or in regards to an employment application.
• We do not pass any of your information to third parties (with the exception of members who complete and sign a contract with Ashbourne Management Services Ltd.)

We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations.
Suncity19 will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with Nineteen Ltd trading as Suncity19.

WHO HAS ACCESS TO YOUR INFORMATION?
• We will not sell or rent your information to third parties.
• We will not share your information with third parties.

Nineteen Ltd shares your data with Suncity19 Nails Ltd, which operates from 12-18 Brook Street, Daventry, Northamptonshire, NN11 4GG. Please be reassured that we will not release your information to third parties beyond Suncity19 unless we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.

YOUR CHOICES:
You have a choice about whether or not you wish to receive information from us. We will ask you on your first visit to the salon when you fill out a client card If you want to receive direct marketing communications from us about Suncity19 products and services. We will show you a hard copy of this Privacy Policy and ask whether you wish to opt in to receiving marketing. This may be by post, email, phone or text message.
We will not contact you for marketing purposes by post, email, phone or text message unless you have given your prior consent. You can change your marketing preferences at any time by contacting us via our website contact form or write to us at: 12-18 Brook Street, Daventry, Northamptonshire, NN11 4GG.

HOW YOU CAN ACCESS AND UPDATE YOUR INFORMATION?
The accuracy of your information is important to us. The easiest way to review and correct the information that we hold about you in case it is inaccurate or out of date is to ask at reception when you come to the salon. If you prefer, you can let us know via our website contact form or write to us at: 12-18 Brook Street, Daventry, Northamptonshire, NN11 4GG.
You have the right to ask for a copy of the information Suncity19 holds about you. Please notify us via our website contact form or write to us at: 12-18 Brook Street, Daventry, Northamptonshire, NN11 4GG.

SECURITY PRECAUTIONS IN PLACE TO PROTECT THE LOSS, MISUSE OR ALTERATION OF YOUR INFORMATION
When you give us personal information, we take steps to ensure that it’s treated securely.  The vast majority of your data (personal data) is collected at the salon and inputted to our computer manually which minimises the security risks involved with online data collection.  We never hold any bank card details, however we keep the ‘Merchant Copy’ of all card transactions in line with set financial regulations and guidelines.  Our Salon Tracker Management System is backed up on a daily basis to protect against loss of data. If you choose to transmit non-sensitive details to us (your email address etc.) normally over the Internet, this can never be guaranteed to be 100% secure. As a result, while we take great care to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.

USE OF COOKIES
Like many other websites, the Suncity19 website may use cookies. ‘Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. While cookies collect statistical data about your browsing actions and patterns, they do not identify you as
an individual. This helps us to improve our website and deliver a better more personalised web user experience.
It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer, visit our full cookies policy.
Turning cookies of may result in a loss of functionality when using our website.

LINKS TO OTHER WEBSITES
Our website may contain links to other websites run by other organisations. This privacy policy applies only to the Suncity19 website‚ so we encourage you to read the privacy statements on the other websites you visit.  Suncity19 cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.
In addition, if you linked to our website from a third-party website, Suncity19 cannot be held responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the privacy policy of that third-party site.

TRANSFERRING YOUR INFORMATION OUTSIDE OF EUROPE
As part of the services offered to you through our website, the information which you provide to us may be transferred to countries outside the European Union (“EU”).
By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy. Currently our servers are located within the European Union and the United States (covered under the EU-U.S Privacy Shield Framework).
If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.

UNDER 18s
Our policy is that all under 18’s wishing to use the salon need to have a parent registered with us who are happy for them have that particular treatment. We will not take the details of the under 18 apart from their name.  Treatments to under 18’s are also at our discretion and will never include sunbeds. The treatments will be logged on the parents account so that we have a record of them for insurance purposes.

ANY QUESTIONS?
If you have a question, of any type, about the Suncity19 privacy policy or the use to which we put information we gather, or if you have any views you wish to share with us, please contact us via our website contact form or write to us at: 12-18 Brook Street, Daventry, Northamptonshire, NN11 4GG.

Review of these policies: Suncity19 keep this Policy under regular review. This Policy was last updated in May 2023.

Right to complain
You have a right to complain to the ICO if you think there is a problem with the way we are handling your data.