Legal
Privacy policy
Last updated: 9 September 2026
This policy explains what personal information Ososnatched (a trading name of Ososnatched Ltd, a company registered in England and Wales, company number 15699385) collects, why, and what your rights are. We are the "data controller" for the information described here.
Contact us about anything in this policy at hello@ososnatched.com, or by post at our registered office, 7 Bell Yard, London, England, WC2A 2JR.
What we collect
- When you book. Your name, email, phone number, the service booked and any notes you give at booking — collected through our booking provider, Acuity Scheduling.
- When you buy hair. Your name, delivery address, email and order details — collected through our shop provider, Shopify. Card payments are handled by Shopify's payment processor; we never see or store your full card number.
- When you contact us. Whatever you put in an email, message or enquiry.
- When you use the site. Basic analytics about pages visited, if you consent to analytics cookies — see our cookie policy.
Why we use it, and our lawful basis
| What for | Lawful basis (UK GDPR) |
|---|---|
| Taking and managing your appointment, sending confirmations and reminders | Performance of a contract |
| Processing and delivering a shop order | Performance of a contract |
| Replying to your enquiries | Legitimate interests (running the business) |
| Keeping records we're required to keep (e.g. tax) | Legal obligation |
| Analytics and any marketing emails | Consent — you can withdraw it any time |
Who we share it with
We don't sell your data. We share it only with the providers that make the service work, each acting as our processor under contract:
- Acuity Scheduling (Squarespace) — booking and appointment data.
- Shopify — shop orders, delivery and payment.
- Netlify — hosting for this website.
- Google — analytics, only if you consent.
- Delivery couriers, and HMRC or other authorities where the law requires.
Some of these providers are based outside the UK. Where your data is transferred abroad, it's protected by the safeguards UK data protection law requires (such as the UK's International Data Transfer Agreement or adequacy regulations).
How long we keep it
We keep booking and order records for as long as needed to provide the service and to meet our legal obligations — typically six years after your last interaction with us, to satisfy HMRC and other record-keeping requirements. Marketing consent is kept until you withdraw it. After that, we delete or anonymise your data.
Your rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal data we hold about you;
- Have inaccurate data corrected;
- Ask us to delete your data, or restrict how we use it;
- Object to processing based on our legitimate interests;
- Withdraw consent for analytics or marketing at any time;
- Ask for your data in a portable format.
To exercise any of these, email hello@ososnatched.com. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to put it right first.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.