PRIVACY POLICY

Your privacy matters to us. This page explains how Boys Will Be Girls, our London makeover studio, uses and looks after information about website visitors and clients.

Questions or privacy requests? Email mail@boyswillbegirls.com or use our contact page. Cindy and Victoria can help.

Last updated: 17 September 2026.

1. Your privacy comes first

Boys Will Be Girls is responsible for the personal information we use to run our website and studio. This is sometimes called the “data controller”.

We respect your privacy and the personal nature of your visit. We ask for information to answer your questions, arrange your booking and provide your chosen service. We do not sell your personal information. We share it with service providers where needed to run the business, or where the law requires it.

2. Your rights and our responsibilities

We handle personal information under UK data protection law. The reason we are allowed to use it depends on what we are doing:

  • Enquiries and bookings: to take steps you request before a booking and to provide the service you book.
  • Everyday business and security: our legitimate interests in answering general questions, managing records, preventing spam and protecting the website, balanced against your privacy rights.
  • Accounts and legal requirements: to meet obligations such as keeping appropriate tax and payment records.
  • Optional Analytics: your consent, which you can withdraw through Cookie Settings.

You can ask us for a copy of your personal information, ask us to correct it, or ask us to delete it. Depending on the circumstances, you can also ask us to limit how we use it or request a portable copy. Some information may need to be kept to meet a legal obligation or deal with a dispute.

Your right to object: you can object to uses based on our legitimate interests. You can always object to use of your information for direct marketing.

Where we rely on your consent, you can withdraw it at any time. This does not undo processing that was lawful before you withdrew it. Contact us using the email above if you would like help.

If you are unhappy with how we handle your information, please contact us. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

3. What we collect and why

Website visits and Google Analytics

We use Google Analytics 4 to understand how visitors find and use our website and to help us improve it. It runs only after you accept Analytics cookies.

This can include the pages you visit, how you reached the website, your interactions with pages, your device and browser type, and your approximate location. Google processes this information for Analytics. Cookies use identifiers to help distinguish visits. These identifiers can count as personal data even though they do not contain your name, so we do not describe this information as completely anonymous.

Our Analytics setup has Google signals and advertising personalisation switched off. You can read more in Google’s explanation of information from partner sites.

Enquiries, questionnaires and bookings

When you contact us, complete a questionnaire or book a visit, we use the details you provide. These may include your preferred name, email address, phone number, chosen service, appointment details, preferences, messages and any files or photos you choose to send.

We use these details to reply, plan your visit, manage your booking and provide your service. Messages and submissions may be held in our email accounts, website systems and the devices we use for studio work. Booking and payment services also hold the information needed to process your appointment or payment.

Please share only what we need to help you. You do not need to tell us personal details unrelated to your enquiry or service. Without essential contact or booking details, we may be unable to reply or arrange your visit.

How long we keep information

How long we need information depends on what it is for. We consider whether an enquiry is still open, whether it is needed for your booking or follow-up, and whether we must keep it for accounts, legal obligations or a possible dispute. We keep information only for as long as it is needed for those purposes, then delete it or remove identifying details.

Cookie lifetimes and Analytics storage settings are separate from the time we keep client records. You can contact us if you would like to know more about the information held about you or request its deletion.

4. Cookies and your choices

Cookies are small pieces of information stored in your browser. Some help the website work or remember your privacy choices. Optional Analytics cookies help us understand website use.

  • Necessary cookies support essential functions, including remembering your cookie choices.
  • Analytics cookies include _ga and _ga_RFCGVCFQQ3. They help Google Analytics distinguish visitors and visits. They are optional and are not activated until you accept Analytics.

Use Accept All to accept the optional cookies offered, Reject All to reject them, or Cookie Settings to choose. Rejecting Analytics does not stop you browsing the website or contacting us.

You can change your mind at any time. Open the Cookie Settings tab on the website, switch Analytics off and save your choice. This stops future Analytics collection through our website. It does not automatically erase information already collected.

You can also delete or block cookies in your browser. Clearing cookies may remove your saved choice, so you may be asked again. Separate websites you visit, such as booking or social media services, have their own cookie controls and privacy policies.

5. Services that help us run the studio

We use services to host the website, manage email, arrange bookings, process payments and understand website use. These include Heart Internet for website hosting, Google for email and optional Analytics, Calendly for online booking, and Stripe for payments made through our booking service.

The information each service receives depends on how you use it. For example, a booking service needs appointment and contact details, while a payment provider needs information to process your payment. Their own privacy notices explain how they handle information for their services.

Some providers process information outside the UK. Where UK data protection law requires safeguards for a transfer, these must be in place, such as an approved transfer arrangement or contractual protections. Contact us if you would like details of the providers or safeguards relevant to your information.

Our website uses HTTPS to protect information as it travels between your browser and the website. We also take reasonable steps to protect the information held in our business systems.

6. If something goes wrong

If personal information is lost, disclosed or accessed without permission, we will assess what happened and take steps to limit the harm.

Where a breach must be reported to the ICO, we will notify it without undue delay and, where feasible, within 72 hours of becoming aware of it. If a breach is likely to put people’s rights and freedoms at high risk, we will also tell those affected without undue delay and explain what they can do to protect themselves.

7. Keeping this policy up to date

We may update this page when our services, website or data practices change. The date at the top shows when it was last updated. If a change needs a separate notice or fresh consent, we will provide that where required.

If anything here is unclear, please email mail@boyswillbegirls.com. We will do our best to explain it simply.