Privacy policy

Last updated: May 2026


This Privacy Policy explains how Renstouch ("we," "us," "our") collects, uses, stores, and protects your personal information. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Renstouch is a hair styling and hair products business based in South London, United Kingdom.


Trading name: Renstouch Address: 69 High Street, Beckenham, BR3 1AW, United Kingdom Email: heyren@renstouch.co.uk Website: www.renstouch.co.uk


For the purposes of UK GDPR, Renstouch is the data controller of the personal information you provide.

2. What Information We Collect

We may collect and process the following categories of personal information:


Identity and contact information: Your full name, email address, phone number, billing address, and shipping address.


Booking and service information: Appointment dates, services booked, hair preferences, service history, and any notes related to your appointments.


Health and sensitivity information: Allergies, scalp sensitivities, skin conditions, and any medical information you choose to disclose to ensure safe service delivery. This is treated as special category data and handled with extra care.


Payment information: Card details, transaction records, and payment confirmations. Card details are processed by our payment providers (Stripe, Shopify Payments) and we do not store full card numbers on our systems.


Marketing and communications data: Your preferences for receiving marketing communications, your responses to email and SMS campaigns, and your engagement with our content.


Photos and videos: Images or videos taken during or after your appointment, where you have consented to their use for promotional or social media content.


Website and technical data: IP address, browser type, device information, pages visited, time spent on pages, referral source, and similar analytics information collected through cookies and tracking technologies.


Communications: Records of your messages, emails, and direct messages sent to us via website, email, Instagram, TikTok, WhatsApp, or other channels.

3. How We Use Your Information

We use your personal information for the following purposes, each based on a lawful basis under UK GDPR:


To provide our services (lawful basis: contract): Managing your bookings, processing payments, fulfilling product orders, and providing the services you have purchased.


To communicate with you (lawful basis: contract and legitimate interests): Sending booking confirmations, appointment reminders, order updates, and responding to your enquiries.


For marketing (lawful basis: consent or legitimate interests): Sending you newsletters, promotional offers, tutorial releases, and product launch information where you have opted in. You can opt out at any time.


To comply with legal obligations (lawful basis: legal obligation): Keeping accounting records, responding to lawful requests from authorities, and meeting tax obligations.


To protect our business (lawful basis: legitimate interests): Detecting fraud, preventing misuse of our services, and maintaining records for dispute resolution.


To improve our services (lawful basis: legitimate interests): Analysing how our website and services are used so we can improve them.

4. Special Category Data

Where you disclose health, allergy, or medical information, we process this with your explicit consent for the specific purpose of providing safe hair services. You may withdraw your consent at any time, although this may affect our ability to provide certain services.

5. Who We Share Your Information With

We never sell your personal information. We share your information only with the following categories of recipients:


Service providers we rely on to run our business, including but not limited to:


  • Shopify (e-commerce platform and website hosting)

  • Stripe and Shopify Payments (payment processing)

  • Klaviyo (email and SMS marketing)

  • Acuity Scheduling (appointment booking)

  • Royal Mail and other delivery couriers (for product orders)

  • Inrō or similar Instagram automation tools (where authorised)

  • Our accountant and bookkeeping providers

  • Cloud storage providers (such as Google Workspace, iCloud)


These providers are contractually required to handle your data securely and only for the purposes we specify.


Legal and regulatory bodies where required by law, including HMRC, the Information Commissioner's Office, courts, and law enforcement.


Professional advisors such as solicitors, accountants, and insurers, where reasonably required.


Successors in business in the event Renstouch is sold, restructured, or merged with another business. You will be notified of any such change.

6. International Transfers

Some of our service providers (such as Klaviyo, Stripe, and cloud platforms) are based outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on UK-approved transfer mechanisms such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or adequacy decisions made by the UK Government.

7. How Long We Keep Your Information

We keep your personal information only as long as necessary for the purposes for which it was collected, including:


  • Booking and service records: 6 years from the date of your last appointment, in line with HMRC requirements

  • Order and transaction records: 6 years from the date of the order, in line with HMRC requirements

  • Marketing data: Until you withdraw your consent or for 3 years after your last interaction, whichever is sooner

  • Health and allergy information: Until you withdraw your consent or 6 years after your last appointment

  • Photos and videos: Until you withdraw your consent or until they are no longer used for promotional purposes

  • Website analytics: Up to 24 months in most cases


After these periods, your data will be securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the following rights:


  • The right to be informed about how we collect and use your data (this Policy)

  • The right of access to a copy of the personal information we hold about you

  • The right to rectification of inaccurate or incomplete personal information

  • The right to erasure ("right to be forgotten") in certain circumstances

  • The right to restrict processing in certain circumstances

  • The right to data portability for data you have provided to us

  • The right to object to processing based on legitimate interests, and to direct marketing

  • The right to withdraw consent at any time where we rely on consent

  • The right not to be subject to automated decision-making that has a significant effect on you


To exercise any of these rights, please contact us at heyren@renstouch.co.uk. We will respond within one calendar month.


You also have the right to make a complaint to the Information Commissioner's Office (ICO) at any time. The ICO's contact details are:


Information Commissioner's Office Wycliffe House, Water Lane Wilmslow, Cheshire SK9 5AF Telephone: 0303 123 1113 Website: www.ico.org.uk


We would, however, appreciate the opportunity to address your concerns first.

9. Cookies and Tracking

Our website uses cookies and similar technologies. For details on what cookies we use, why we use them, and how you can control them, please see our separate Cookie Policy.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16 without parental consent. Where appointments are booked for under-16s, we require a parent or guardian to make the booking and provide consent on their behalf.

11. Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. This includes encrypted payment processing, password protection, secure cloud storage, and regular reviews of our security practices. However, no system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this Policy will reflect the most recent revision. Where changes are material, we will notify you by email or through a prominent notice on our website.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:


Email: heren@renstouch.co.uk Address: 69 High Street, Beckenham, BR3 1AW, United Kingdom