Ed's Hair (Bramhall) Limited — Trading as Eds Hair
Last updated: 17 October 2026
At Eds Hair, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, share, retain and protect personal data when you visit our website, purchase products, create an account, subscribe to our marketing communications or contact us.
It also explains your rights under UK data protection legislation and how we use cookies and similar technologies.
This policy applies to our website at https://edshair.co.uk and our associated online retail activities.
Where you use our hairdressing services, booking systems or other third-party platforms, additional privacy information may apply.
We process personal data in accordance with applicable UK legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.
The data controller responsible for the personal information described in this policy is:
Ed's Hair (Bramhall) Limited
Trading as: Eds Hair
Company registration number: 09645524
VAT registration number: GB244840603
ICO registration number: ZA338402
Registered office:
C/O Atria Accounting Ltd
Imperial House
79–81 Hornby Street
Bury
BL9 5BN
United Kingdom
Trading address:
Eds Hair
13 Bramhall Lane South
Bramhall
Stockport
Cheshire
SK7 1AL
United Kingdom
Data protection enquiries:
Email: gdpr@edshairsalon.co.uk
Telephone: 0161 439 8058
Website: https://edshair.co.uk
Depending on how you interact with our website, we may collect the following categories of personal information.
Your name, billing and delivery addresses, email address, telephone number and customer account details.
Details of products purchased, order numbers, transaction dates, amounts paid, payment status, refunds and relevant payment references.
Payments are processed using Shopify and the payment providers made available at checkout.
We do not ordinarily receive or store complete payment card numbers or card security codes. Payment providers may process these details securely to complete transactions.
Information such as your IP address, browser type, device characteristics, operating system, website interactions, approximate location derived from technical data, referral source and cookie identifiers.
Some of this information may constitute personal data where it identifies or can be linked to an individual.
Information contained in emails, enquiries, reviews, customer service requests, returns, complaints and other communications with us.
Your newsletter subscription status, marketing consent, communication preferences and, where applicable, interactions with marketing messages.
We may receive relevant information from payment processors, delivery providers, fraud prevention services and technology providers where necessary to operate our business.
We may also receive information from third-party services where you have authorised the relevant sharing or where another lawful basis applies.
We only process personal information where we have a valid lawful basis.
| Purpose | Lawful basis |
|---|---|
| Processing orders, payments and deliveries | Performance of a contract |
| Creating and administering customer accounts | Performance of a contract |
| Responding to enquiries before a purchase | Contractual necessity or legitimate interests, as applicable |
| Handling returns, refunds and complaints | Contractual necessity, legal obligation or legitimate interests, as applicable |
| Maintaining accounting, tax and statutory records | Legal obligation |
| Preventing fraud and protecting website security | Legitimate interests or legal obligation, as applicable |
| Providing requested customer service | Contractual necessity or legitimate interests |
| Sending marketing communications | Consent or legitimate interests where the applicable PECR rules permit |
| Operating non-essential advertising and analytics technologies | Consent where required under PECR, with an appropriate UK GDPR lawful basis for associated processing |
| Understanding and improving our website and services | Legitimate interests, or consent where required for the relevant tracking technology |
| Establishing, exercising or defending legal claims | Legitimate interests or another applicable lawful basis |
Where we rely on legitimate interests, we consider whether our business interests are outweighed by your rights and freedoms.
You may contact us to request further information about these assessments.
We will not use your personal information for purposes that are incompatible with those explained in this policy unless permitted or required by law.
Our online store is hosted and operated using Shopify, an ecommerce platform provided by Shopify Inc. and its relevant group companies.
Shopify provides technology that enables us to display products, manage customer accounts, process orders, facilitate payments and operate our online business.
When you visit or make purchases through our store, Shopify may process information including your contact details, order information, device information, IP address and website interactions.
Depending on the services and settings enabled, Shopify may process personal information on our behalf and may also process certain information for purposes for which it acts as an independent controller.
Further information about Shopify's processing of consumer personal data is available at:
Shopify's Consumer Privacy Policy is available at:
https://www.shopify.com/legal/privacy/consumers
Where optional Shopify services involving additional analytics, advertising, personalisation or data sharing are enabled, we will provide appropriate information and obtain any consent required by law.
Cookies are small files stored on your device when you visit a website.
They may be used to remember your preferences, maintain your shopping basket, support secure checkout, understand website performance or deliver relevant advertising.
We may also use similar technologies, including pixels, local storage and other device identifiers.
Our website may use the following categories, depending on the services and applications enabled.
Strictly Necessary Cookies
These support essential website functions such as shopping baskets, checkout, security, fraud prevention and remembering privacy choices.
They may be used without consent where an applicable legal exemption applies.
Functional Cookies
These support additional features and preferences, such as remembering certain website settings or enhancing functionality.
Where consent is legally required, these technologies will only be activated after you have agreed.
Analytics Cookies
These help us understand website usage, including visits, navigation patterns, product interactions and shopping activity.
We use analytics information to assess and improve our website and customer experience.
Analytics technologies will be subject to consent where required by applicable law. Certain limited statistical uses may qualify for a statutory exception where all relevant conditions and safeguards are met.
Marketing and Advertising Cookies
Where enabled, these technologies may help us measure advertising performance, understand customer interactions and deliver more relevant advertising.
Advertising technology providers may combine information collected through our website with information they hold from other sources, subject to their own responsibilities and applicable law.
Non-essential advertising cookies and tracking technologies will not be activated until the necessary consent has been obtained.
Some cookies and similar technologies may be provided by Shopify or by third-party services integrated into our website.
These may include payment, analytics, marketing, security and other ecommerce services.
The precise providers, purposes and retention periods depend on the services enabled on our website.
We aim to provide accurate information about these technologies through our cookie preferences facilities and associated cookie disclosures.
Where consent is required, we will provide a mechanism allowing you to accept or reject non-essential cookies and similar technologies.
You may also be offered more detailed controls over different categories.
You can change or withdraw your consent through our website's cookie preferences facility, where available.
Withdrawing consent does not affect processing that was lawful before withdrawal.
You can also manage or delete cookies through your browser settings. Disabling certain cookies may affect website functionality.
We do not regard continued browsing, inactivity or pre-ticked boxes as valid consent for non-essential tracking.
Where consent is legally required, the relevant technologies must not operate before valid consent has been obtained.
We review our cookie and tracking arrangements when changes are made to our website, Shopify configuration or third-party applications.
We may contact you about our products, offers, new releases, promotions and related services.
We send electronic direct marketing where we have the appropriate permission or where the law permits us to rely on an applicable exception, such as the existing-customer soft opt-in.
Where we rely on the soft opt-in, we will comply with its conditions, including providing a clear opportunity to opt out when details are collected and in subsequent marketing communications.
You may unsubscribe from marketing emails using the unsubscribe link contained in our messages.
Alternatively, contact gdpr@edshairsalon.co.uk.
We will respect your marketing preferences and maintain appropriate suppression records to avoid contacting you after you have opted out.
Marketing messages may contain tracking technologies used to measure engagement. Where such technologies require consent, we will obtain it before using them.
Operational communications about orders, payments, deliveries or other necessary customer service matters are not treated as promotional messages merely because they are sent electronically.
We may share personal information with organisations that help us operate our business, including:
Shopify and relevant ecommerce service providers.
Payment processing and fraud prevention providers.
Postal, courier and delivery services.
Email and customer communications providers.
Website hosting, maintenance and IT security providers.
Accounting, professional advisory and legal service providers.
Marketing and analytics providers, where enabled and legally permitted.
Public authorities, regulators and law enforcement bodies where required or permitted by law.
We only share information where there is an appropriate lawful basis and where sharing is necessary or otherwise legally permitted.
Where third parties process personal data on our behalf, we require appropriate contractual and security protections.
Some organisations may act as independent data controllers and process information under their own privacy notices.
We do not sell customer contact lists to third parties.
Some of our technology and service providers operate internationally.
As a result, personal information may be transferred to or accessed from countries outside the United Kingdom.
Where UK data protection law restricts such transfers, we will use an appropriate legal mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard or exception.
Where required, we will assess the protections available for the information being transferred.
You may contact us for further information about relevant safeguards.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, accounting, regulatory and contractual requirements.
Our retention arrangements include:
Order and Financial Records
We generally retain relevant financial and transaction records for six years, or longer where a specific legal requirement applies.
Customer Account Information
We retain account information while an account remains active and for an appropriate period afterwards where needed for legal, security or business purposes.
Customer Service Communications
We retain communications for periods proportionate to their purpose, taking account of complaints, warranties, potential disputes and legal requirements.
Marketing Information
We retain marketing information while you remain subscribed or while another lawful basis applies. We may retain limited suppression records after an unsubscribe request to ensure your preference continues to be respected.
Cookie and Analytics Information
Retention periods vary according to the technology and provider involved. Further details should be available through the relevant cookie disclosures and provider information.
We periodically review information and delete, anonymise or securely archive it when no longer required.
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.
These may include access restrictions, secure authentication, encryption where appropriate, staff confidentiality requirements and the security controls of our service providers.
No internet-based service can guarantee absolute security.
If we become aware of a personal data breach, we will assess it and notify the Information Commissioner's Office and affected individuals where required by law.
Subject to the circumstances and applicable legal exemptions, you may have the right to:
Access: Request a copy of your personal information.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Request deletion of personal information where applicable.
Restriction: Ask us to restrict certain processing activities.
Portability: Receive certain information in a structured, commonly used, machine-readable format.
Objection: Object to processing based on legitimate interests and object at any time to processing for direct marketing.
Withdraw consent: Withdraw consent where processing relies on it.
Automated decision-making: Exercise relevant rights and protections concerning qualifying solely automated decisions.
These rights are not absolute and may be subject to statutory exceptions.
To exercise your rights, email:
We may request reasonable information to verify your identity before responding.
We will normally respond within one calendar month, subject to any lawful extension or other applicable rules.
We will not ordinarily charge a fee for exercising your rights.
Certain ecommerce, security and payment services may use automated systems to assess transactions, detect suspected fraud or identify unusual activity.
We may also use information about customer interests and purchasing activity to tailor marketing where legally permitted.
Where a decision falls within the legal rules governing significant solely automated decisions, we will provide the information and safeguards required by applicable law.
You may contact us for further information about relevant automated processing.
Our online store is intended primarily for adult customers.
We do not knowingly seek to collect children's personal information for behavioural advertising.
Where we become aware that personal information has been collected from a child without an appropriate lawful basis, we will take reasonable steps to address the matter.
Our website may link to separate services used for salon appointments, consultations, gift vouchers and other hairdressing-related activities.
These may include Phorest and other service providers.
When you use these services, your information may be processed through their systems in accordance with the relevant privacy arrangements.
Salon services may require additional personal information, including allergy or treatment-related information.
Where this involves special category data, we will identify an appropriate UK GDPR Article 9 condition as well as an Article 6 lawful basis and provide any additional information required.
We do not require this information simply to browse or make an ordinary retail purchase through our online store.
Our website may contain links to third-party websites, social media platforms, manufacturers and other services.
These organisations may collect and process information under their own privacy policies.
We recommend reviewing the relevant policies before submitting personal information to external websites.
If you have concerns about how we process your personal information, please contact us first so that we can investigate and respond.
Email: gdpr@edshairsalon.co.uk
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
You may also have the right to seek a judicial remedy under applicable law.
We may update this Privacy Policy to reflect changes in legislation, technology, our business operations or the services we use.
The latest version will be published on our website with its revision date.
Where required, we will provide additional notice or obtain fresh consent before introducing material changes to our processing activities.
For questions, concerns or requests relating to this Privacy Policy or your personal information, please contact:
Ed's Hair (Bramhall) Limited
Data Protection Enquiries
13 Bramhall Lane South
Bramhall
Stockport
Cheshire
SK7 1AL
United Kingdom
Email: gdpr@edshairsalon.co.uk
Telephone: 0161 439 8058
Website: https://edshair.co.uk
© 2026 Ed's Hair (Bramhall) Limited. All rights reserved.
Company registration number: 09645524
VAT registration number: GB244840603
Empowering beauty through expert hair care, creativity and personalised, sustainable service.
© 2026 Ed's Hair (Bramhall) Ltd Trading As Eds Hair - All rights reserved
Sign up to get the latest on sales, new releases and more …
Join the conversation on Instagram and Facebook
© 2026 Eds Hair. Copyright Eds Hair 2026
