Privacy policy

We are delighted that you have shown interest in our enterprise. Data protection is a particularly high priority for the management of Mint. Where a data subject wishes to use special enterprise services via our website, processing of personal data may become necessary. Where such processing is necessary and there is no statutory basis for it, we generally obtain consent from the data subject.

‍

The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in line with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This Privacy Policy informs the general public of the nature, scope and purpose of the personal data we collect, use and process, and informs data subjects of the rights to which they are entitled.

‍

As the controller, Mint has implemented technical and organisational measures to ensure the protection of personal data processed through this website. However, internet-based data transmissions may in principle have security gaps, so absolute protection cannot be guaranteed. Every data subject is free to transfer personal data to us via alternative means, such as by telephone.

‍

1. Definitions

This Privacy Policy is based on the terms used by the European legislator in the GDPR. Personal data means any information relating to an identified or identifiable natural person, a "data subject". An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. A data subject is any identified or identifiable natural person whose personal data is processed by the controller. Processing is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, alignment, combination, restriction, erasure or destruction. Restriction of processing is the marking of stored personal data with the aim of limiting its processing in future. Profiling means any form of automated processing of personal data used to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. Pseudonymisation is the processing of personal data such that it can no longer be attributed to a specific data subject without the use of additional information, provided that information is kept separately and subject to measures ensuring non-attribution. A controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. A recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether a third party or not. A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons authorised to process personal data under the direct authority of the controller or processor. Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes, by which they, by a statement or clear affirmative action, signify agreement to the processing of personal data relating to them.

‍

2. Name and address of the controller

Controller for the purposes of the GDPR, other applicable data protection laws, and other provisions related to data protection is M&D Barbers Ltd, The Mint Academy, 175 Old Christchurch Road, Bournemouth, BH1 1JU. Academy@mintbarbershops.co.uk. 01202 314649. mintbarbershops.co.uk.

‍

3. Name and address of the Data Protection Officer

The Data Protection Officer of the controller is Daryl Legg, M&D Barbers Ltd, 175 Old Christchurch Road, Bournemouth, BH1 1JU. Academy@mintbarbershops.co.uk. 01202 314649. mintbarbershops.co.uk. Any data subject may, at any time, contact our Data Protection Officer directly with questions or suggestions concerning data protection.

‍

4. Cookies

Our website uses cookies. Cookies are text files stored on a computer system via an internet browser. Many cookies contain a cookie ID, a unique identifier consisting of a character string, through which websites and servers can recognise the specific browser in which the cookie was stored. Cookies allow us to provide more user-friendly services, for example by optimising content around a user's preferences, or remembering items in a shopping basket, without requiring information to be re-entered on every visit. You may, at any time, prevent the setting of cookies through a corresponding setting in your internet browser, and may permanently deny the setting of cookies. Already-set cookies may be deleted at any time via your browser or other software. If you deactivate cookies, not all functions of our website may be usable.

‍

5. Collection of general data and information

Our website collects general data and information whenever a data subject or automated system accesses it. This may include browser type and version, operating system, the website from which the accessing system reaches ours, sub-websites visited, date and time of access, IP address, the internet service provider of the accessing system, and other similar data used in the event of attacks on our IT systems. This general data is used to deliver the content of our website correctly, to optimise our website and its advertising, to ensure the long-term viability of our IT systems and website technology, and to provide law enforcement with information necessary for prosecution in the event of a cyber-attack. This anonymously collected data is analysed statistically to increase data protection and security, and is stored separately from any personal data provided by a data subject.

‍

6. Registration on our website

Where our website allows registration, the personal data transmitted is determined by the input mask used. Data entered is collected and stored for our internal use, and may be transferred to processors, such as a parcel service, acting on our behalf. On registration, we also store the IP address and the date and time of registration, to help prevent misuse of our services and, where necessary, to investigate offences. This data is not passed to third parties unless there is a statutory obligation to do so, or the transfer serves the aim of criminal prosecution. Registered users are free to change their personal data at any time, or to have it deleted from our records. We will, on request, tell any data subject what personal data we hold about them, and will correct or erase personal data at their request, insofar as there is no statutory obligation to retain it. Our Data Protection Officer and our employees are available as contacts in this respect.

‍

7. Subscription to our newsletter

Where we offer a newsletter, the input mask used determines what personal data is transmitted. Our newsletter may only be received where the data subject has a valid e-mail address and has registered for the newsletter, confirmed via a double opt-in confirmation email. On registration we also store the IP address, date and time of registration, to help understand any later misuse of the e-mail address. Data collected is used only to send the newsletter, and to inform subscribers of changes to the newsletter service where necessary. This data is not transferred to third parties. Newsletter subscriptions may be terminated, and consent withdrawn, at any time via the unsubscribe link in each newsletter, directly on our website, or by contacting us.

‍

8. Newsletter tracking

Our newsletters may contain tracking pixels, small graphics embedded in HTML e-mails that allow log file recording and analysis, so we can see if and when an e-mail was opened, and which links were followed. This data is used to optimise the newsletter and adapt future content to subscriber interests, and is not passed to third parties. Data subjects may revoke their consent, given via the double opt-in procedure, at any time, after which this data is deleted. Unsubscribing from the newsletter is automatically treated as a revocation of this consent.

‍

9. Contact via the website

Our website includes ways to contact us directly, including by e-mail or contact form. Personal data transmitted when you contact us is stored automatically for the purpose of processing your enquiry or contacting you, and is not transferred to third parties.

‍

10. Subscription to blog comments

Where our blog allows comment subscriptions, a data subject may subscribe to follow-up comments on a particular post. We will send an automatic confirmation e-mail using the double opt-in procedure to verify the subscription. This can be terminated at any time.

‍

11. Routine erasure and blocking of personal data

We process and store personal data only for the period necessary to achieve the purpose of storage, or as required by applicable law. Where the storage purpose no longer applies, or a legally prescribed storage period expires, personal data is routinely blocked or erased in accordance with legal requirements.

‍

12. Rights of the data subject

You have the right to obtain confirmation from us as to whether personal data concerning you is being processed. You have the right to obtain free information about your personal data, and a copy of it, including the purposes of processing, the categories of data concerned, the recipients or categories of recipients, the envisaged storage period or the criteria for determining it, your right to rectification, erasure or restriction of processing or to object, your right to complain to a supervisory authority, the source of the data where not collected from you directly, and the existence of any automated decision-making, including profiling. You also have the right to know whether your data is transferred to a third country or international organisation and, if so, what safeguards apply. You have the right to have inaccurate personal data corrected without undue delay, and incomplete personal data completed. You have the right to have your personal data erased without undue delay where, for example, it is no longer necessary for the purposes for which it was collected, you withdraw consent and there is no other legal basis for processing, you object to the processing and there are no overriding legitimate grounds, the data has been unlawfully processed, or erasure is required to comply with a legal obligation. You have the right to request restriction of processing where, for example, you contest the accuracy of the data, the processing is unlawful but you oppose erasure, we no longer need the data but you need it for a legal claim, or you have objected to processing pending verification of our grounds. If you wish to request restriction of the processing of personal data we hold, you may contact our Data Protection Officer, Daryl Legg, or another employee, who will arrange the restriction of processing. You have the right to receive personal data you have provided to us in a structured, commonly used, machine-readable format, and to transmit it to another controller, where the processing is based on consent or a contract and is carried out by automated means. You have the right to object, on grounds relating to your particular situation, to processing based on our legitimate interests, including profiling. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing is necessary for a legal claim. Where we process your data for direct marketing, you may object at any time and we will stop such processing. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you, except where necessary for a contract with you, authorised by law with appropriate safeguards, or based on your explicit consent. Where such a decision is made, you have the right to obtain human intervention, express your point of view and contest the decision. You have the right to withdraw any consent to the processing of your personal data at any time. To exercise any of these rights, please contact our Data Protection Officer, Daryl Legg, or another employee, at any time using the details in section 3.

‍

13. Data protection for job applications

Where you apply for a role with us, we collect and process your personal data for the purpose of the application procedure, including where submitted by e-mail or web form. If we conclude an employment contract with you, your data is retained for the purpose of the employment relationship in line with legal requirements. If no contract is concluded, your application documents are automatically erased two months after notification of the outcome, unless we have another legitimate interest in retaining them, such as evidencing compliance with equal treatment legislation.

‍

14. Facebook

Our website may integrate Facebook components, such as plug-ins or buttons. Facebook is operated by Meta Platforms, Inc. for users outside the EEA and UK, or Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Where a Facebook component is integrated on a page you visit, your browser automatically downloads a display of that component from Facebook, and Facebook becomes aware that our page was visited. If you are logged into Facebook at the time, this visit is associated with your Facebook account, and if you interact with a Facebook button, such as "Like", or submit a comment, this information is likewise matched to your account. This occurs regardless of whether you interact with the component, provided you are logged in. You can prevent this by logging out of Facebook before visiting our website. Facebook's privacy policy is available at facebook.com/about/privacy.

‍

15. Google Analytics

Our website may integrate Google Analytics, a web analytics service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand website traffic and usage, and to produce reports on website activity. Google Analytics sets a cookie on your device, and with each page visited, your browser transmits data, including your IP address, to Google. Where enabled, IP addresses are anonymised for visitors within the EU/EEA. Google may pass this data to third parties. You can prevent this by adjusting your browser settings to refuse cookies, or by installing the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout. Google's privacy policy is available at policies.google.com/privacy.

‍

16. Google Ads and remarketing

Our website may integrate Google Ads, including remarketing, operated by Google Ireland Limited. Google Ads allows us to display relevant advertising to users who have previously visited our website, and to measure the effectiveness of our advertising campaigns. Where you reach our website via a Google ad, a conversion cookie may be placed on your device. This cookie does not identify you personally, and typically expires after 30 days. It allows Google and us to understand whether an ad led to a sale or enquiry, and to produce visit statistics used to optimise our advertising. You can prevent the setting of cookies by adjusting your browser settings, and can object to interest-based Google advertising via Google Ads Settings at adssettings.google.com. Google's privacy policy is available at policies.google.com/privacy.

‍

17. Instagram

Our website may integrate Instagram components, such as embedded posts or buttons. Instagram is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Where an Instagram component is integrated on a page you visit, your browser is prompted to download a display of that component, and Instagram becomes aware our page was visited. If you are logged into Instagram at the time, this may be associated with your account. You can prevent this by logging out of Instagram before visiting our website. Instagram's privacy policy is available at help.instagram.com/519522125107875 and instagram.com/about/legal/privacy.

‍

18. LinkedIn

Our website may integrate LinkedIn components, such as share or follow buttons. LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Where a LinkedIn component is integrated on a page you visit, your browser is prompted to download a display of that component, and LinkedIn becomes aware our page was visited. If you are logged into LinkedIn at the time, this may be associated with your account. You can prevent this by logging out of LinkedIn before visiting our website. LinkedIn's privacy policy is available at linkedin.com/legal/privacy-policy, and cookie settings can be managed at linkedin.com/legal/cookie-policy.

‍

19. YouTube

Our website may embed YouTube videos. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Where a YouTube video is embedded on a page you visit, your browser is prompted to download a display of that component, and YouTube and Google become aware our page was visited. If you are logged into YouTube at the time, this may be associated with your account, regardless of whether you play the video. You can prevent this by logging out of YouTube before visiting our website. YouTube's privacy provisions are available at policies.google.com/privacy.

‍

20. PayPal

Where PayPal is offered as a payment method, choosing it will transmit your data, such as name, address, e-mail address, IP address and phone number, to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for the purpose of processing payment and preventing fraud. PayPal may pass this data to credit reference agencies for identity and creditworthiness checks, and to its affiliates or subcontractors where necessary to fulfil contractual obligations. You may withdraw consent for PayPal's handling of your personal data at any time by contacting PayPal directly, though this does not affect data that must be processed for payments already made. PayPal's privacy policy is available at paypal.com/uk/webapps/mpp/ua/privacy-full.

‍

21. Legal basis for processing

Article 6(1)(a) GDPR is our legal basis where we rely on your consent for a specific purpose. Article 6(1)(b) applies where processing is necessary for the performance of a contract with you, or to take pre-contractual steps at your request, such as answering an enquiry. Article 6(1)(c) applies where we are subject to a legal obligation requiring processing, such as tax law. Article 6(1)(d) applies, rarely, where processing is necessary to protect someone's vital interests. Article 6(1)(f) applies where processing is necessary for our legitimate interests, or those of a third party, except where those interests are overridden by your interests or fundamental rights.

‍

22. Our legitimate interests

Where we rely on Article 6(1)(f) GDPR, our legitimate interest is to run our business for the benefit of our clients, students, employees and shareholders.

‍

23. Storage period

We determine the period for which personal data is stored by reference to the applicable statutory retention period. Once that period expires, and the data is no longer needed to fulfil or enter into a contract, it is routinely deleted.

‍

24. Provision of personal data

Provision of personal data is sometimes required by law, for example tax regulations, or by contract, for example details about a contractual partner. Where entering into a contract with us requires you to provide personal data, failure to do so may mean we cannot conclude that contract. If you have questions about whether providing data is required, or the consequences of not doing so, please contact our Data Protection Officer before providing any personal data.

‍

25. Automated decision-making

We do not currently use automated decision-making or profiling that produces legal effects, or similarly significantly affects, data subjects. If this changes, we will update this policy accordingly.

‍