Thorn & Halo is committed to protecting your personal data and respecting your privacy. This policy explains what information we collect, how it is used, and your rights under the UK General Data Protection Regulation (UK GDPR).

Who we are

Thorn & Halo
Specialist Hair‑Loss Solutions & Hair Integration
Winterbourne Abbas, Dorchester, Dorset
Contact: 07831 761 713

Thorn & Halo is the Data Controller, meaning we decide how your personal data is used.

What Personal Data We Collect

We may collect the following information:

Personal & Contact Information

  • Name
  • Phone number
  • Email address
  • Social media contact details
  • Address (if required for patch tests or home consultations)

 

Appointment & Service Information

  • Booking history
  • Consultation notes
  • Patch test results
  • Photos (only with your consent)

 

Sensitive Data (Special Category Data)

Because Thorn & Halo specialises in hair‑loss solutions, we may collect information relating to:

  • Hair loss conditions
  • Medical history relevant to treatment
  • Scalp health

 

This information is only collected with your explicit consent and is used solely to provide safe, appropriate services.

How Your Data Is Used

We use your data to:

  • Manage appointments and bookings
  • Provide hair‑loss and hair‑integration services
  • Maintain accurate consultation and treatment records
  • Contact you about your appointments
  • Process payments
  • Improve our services
  • Comply with legal and insurance requirements


We never sell your data or share it with third parties for marketing.

How Your Data Is Stored

Your data is stored securely using:

  • Password‑protected devices
  • Encrypted booking systems (e.g., Fresha)
  • Secure digital files
  • Locked physical storage (if paper notes are used)


Only Thorn & Halo has access to your information.

How Long Your Data Is Kept

We keep your data only for as long as necessary:

  • Consultation & treatment records: 7 years (insurance requirement)
  • Photos: until you withdraw consent
  • General enquiries: 12 months
  • Booking information: as long as you remain an active client


After this period, your data is securely deleted.

Sharing Your Data

Your data may be shared only with:

  • Booking platforms (e.g., Fresha)
  • Payment processors (e.g., Stripe)
  • Insurance providers (only if legally required)


These companies are GDPR‑compliant and only process data on our behalf.

We do not share your data with any third parties for advertising or external marketing.

Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your data
  • Withdraw consent at any time
  • Object to processing
  • Request a copy of your data
  • Make a complaint to the ICO (Information Commissioner’s Office)


To exercise any of these rights, contact us directly.

Photos & Social Media

We will never post photos of you or your hair without your written consent.
You may withdraw consent at any time, and the image will be removed.

Contact

If you have any questions about this policy or how your data is handled, please contact:

Thorn & Halo
Email: claire@thornandhalo.co.uk
Phone: 07831 761 713