Privacy Policy

Last updated: 19 April 2026

1. Who We Are

This website is operated by BUENO SALON LTD (Company No. 16907995), trading as Bueno by Brooke.

Registered address: 5 Bell Street, Upton, West Yorkshire, England, WF9 1LB

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, BUENO SALON LTD is the data controller.

2. What Data We Collect

When you use our website or contact us, we may collect the following personal data:

Name — provided via our contact/booking form
Email address — provided via our contact/booking form
Phone number — provided via our contact/booking form
Message content — any information you include in the message field
Technical data — your IP address, browser type, operating system, and referring URL (collected automatically via server logs or analytics)

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiry or booking request
To schedule and manage your appointments
To communicate important information about your booking (e.g., patch test reminders)
To improve our website and services

Legal basis: We process your data based on your consent (by submitting the form) and our legitimate interest in operating our business and responding to customer enquiries.

4. How We Store and Protect Your Data

Your personal data is stored securely and is only accessible to authorised personnel at Bueno by Brooke. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Booking enquiry data is retained for up to 12 months unless you request earlier deletion.

5. Sharing Your Data

We do not sell, trade, or rent your personal data to third parties.

We may share your data with:

Service providers who assist us in operating our website or managing communications (e.g., email hosting), under strict data processing agreements
Legal authorities if required to do so by law or in response to a valid legal request

6. Cookies

Our website may use essential cookies to ensure the site functions correctly. We may also use analytics cookies to understand how visitors use our site.

You can control cookie preferences through your browser settings. Disabling cookies may affect site functionality.

For more information about cookies, visit www.allaboutcookies.org.

7. Your Rights

Under the UK GDPR, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data (the "right to be forgotten")
Restrict or object to processing of your data
Data portability — receive your data in a commonly used format
Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, please email us at [email protected].

8. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.