Privacy & CCTV Policy

At Bridge Beauty we are committed to maintaining the trust and confidence of our visitors to our website and business. In particular, we want you to know that Bridge Beauty is not in the business of selling, renting or trading email lists with other companies and businesses for marketing purposes. In this Privacy Policy, we’ve provided lots of detailed information on when and why we collect your personal information, how we use it, the limited conditions under which we may disclose it to others and how we keep it secure. Grab a nice cup of tea and read on.

Here at Bridge Beauty we may collect email and personal data, such as your full name and telephone number, for arranging bookings and sending you reminders as to when your appointments are coming up. All this data is stored in a central location, however please be aware that some relevant data is shared with a third party booking system, which helps Bridge Beauty organise bookings and send out automatic reminders. This company is called Ovatu, and they too have a comprehensive Provacy Policy, to protect the limited data they need to allow us to give you the best booking service possible. Their policy can be read here: https://ovatu.com/uk/privacy

Types of data we collect

Website Cookies

Cookies are used on our website should you choose to register and comment on our blog, they are used purely to retain your login details for you to easily login in the future as required.

Google Analytics

When someone visits www.bridgebeauty.com we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Wifi

When you use Bridge Beauty Wi-Fi we may collect data about:

  1.  your device;
  2.  the volume of data which you use;
  3. the websites and applications which you access; and
  4.  your usage by access time, frequency and location.

Access to your personal information

Under GDPR you are entitled to view, amend, or delete the personal information that we hold. Email your request to our data protection officer Hannah Lewis at bridge.beauty@hotmail.com should you wish to check if we hold any data relevant to you, and wish to view, amend or delete this information.

Changes to this Privacy Notice

Bridge Beauty likes to make sure that your data is protected in the best way possible, we will review our Privacy Policy annually or when new policies are introduced.

This privacy statement was last updated on May 19, 2025 and applies to citizens and legal permanent residents of the United Kingdom.

In this privacy statement, we explain what we do with the data we obtain about you via https://bridgebeauty.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

  • we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
  • we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
  • we first request your explicit consent to process your personal data in cases requiring your consent;
  • we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
  • we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)

2. Sharing with other parties

We only share this data with processors and with other third parties for which consent must be obtained.

Third parties

Name: Ovatu
Country: [country]
Purpose: Booking
Data: [data]

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

  • You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
  • Right of access: You have the right to access your personal data that is known to us.
  • Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
  • If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
  • Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
  • Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

9. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Information Commissioner's Office:


Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

10. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

11. Contact details

Bridge Beauty Limited
102 Winchester Road, Chandler's Ford, Eastleigh, England, SO53 2GJ
United Kingdom
Website: https://bridgebeauty.com
Email: bridge.beauty@ex.comhotmail.com
Phone number: 02380 269992

CCTV Policy

Version: 1.0
Last Updated: 01/12/2025
Approved By: Hannah Lewis

INTRODUCTION

Bridge Beauty Ltd uses Closed-Circuit Television (CCTV) systems for the purposes of security, crime prevention, staff and customer safety, and the protection of property. This policy explains how CCTV data is collected, stored, used, and protected in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Bridge Beauty Ltd is committed to ensuring CCTV is used responsibly, proportionately, and transparently.

DATA CONTROLLER

Hannah Lewis

Bridge Beauty Ltd 

102 Winchester Rd, Chandler's Ford, Eastleigh SO53 2GJ

The Data Controller is responsible for ensuring that all CCTV processing complies with data protection legislation.

PURPOSE OF CCTV

Bridge Beauty Ltd operates CCTV for the following legitimate purposes:

  • Preventing and detecting crime
  • Protecting the safety of staff, customers, and visitors
  • Protecting Bridge Beauty’s premises, vehicles, equipment, and assets
  • Assisting law enforcement when necessary
  • Monitoring incidents for insurance, health & safety, and investigation purposes

CCTV is not used for routine monitoring of employee performance.

LEGAL BASIS FOR PROCESSING

The lawful basis for processing CCTV footage is:

  • Legitimate Interests (Article 6(1)(f) UK GDPR):
    Bridge Beauty Ltd has a legitimate interest in safeguarding people, property, and preventing crime.

Where footage is shared with law enforcement, additional lawful bases may apply.

  1. Locations of CCTV Cameras

Cameras may be installed in the following areas:

  • External areas including forecourts, entrances, car parks, vehicle yards
  • Reception or customer-facing areas

Cameras will not be installed in private areas such as toilets or changing rooms

SIGNAGE AND TRANSPARENCY

Clear and visible signage is displayed in all monitored areas, stating:

  • Bridge Beauty Ltd operates CCTV
  • The purpose of recording
  • How to contact the Data Controller

This ensures all individuals are aware of CCTV use before entering monitored zones.

RETENTION OF CCTV FOOTAGE

CCTV footage is stored securely and retained for no longer than necessary.
Bridge Beauty Ltd retains footage for 31 days, unless:

  • Footage is required for investigation of an incident
  • Footage is requested by law enforcement
  • Footage is required to defend a legal claim

After the retention period expires, footage is automatically deleted.

ACCESS TO AND SHARING OF FOOTAGE

Access to CCTV footage is restricted to authorised Bridge Beauty Ltd personnel. Footage may be shared only with:

  • Police or other law enforcement agencies
  • Insurance providers
  • Legal representatives
  • Other parties where legally justified

Footage will not be disclosed to third parties for marketing purposes.

  1. SECURITY OF CCTV DATA

Bridge Beauty Ltd ensures that CCTV systems are protected through:

  • Password-protected access
  • Restricted staff permissions
  • Secure storage
  • Regular system maintenance and testing
  • Physical security of recording equipment

SUBJECT ACCESS REQUESTS (SARs)

Any individual has the right to request access to CCTV footage in which they appear, subject to:

  • Verification of identity
  • Protection of the rights of other individuals whose images may also appear

Requests should be submitted to:
Email: bridge.beauty@hotmail.com

Bridge Beauty Ltd will respond within one month.

If footage cannot be provided (e.g., due to identification issues, erased data, or legal exemptions), Bridge Beauty Ltd will explain the reason in writing.

DATA PROTECTION IMPACT ASSESSMENT (DPIA)

Bridge Beauty Ltd conducts a CCTV-specific DPIA to ensure:

  • The necessity and proportionality of CCTV use
  • Assessment of risks to individuals’ privacy
  • Implementation of appropriate mitigation measures

The DPIA is reviewed periodically.

STAFF TRAINING

All staff with access to CCTV:

  • Receive data protection and privacy training
  • Understand their responsibilities
  • Are prohibited from inappropriate or unauthorised use of CCTV systems

BREACHES AND COMPLAINTS

    Any suspected data breach relating to CCTV will be investigated in accordance with Bridge Beauty Ltd Data Protection Policies.

    Individuals may raise concerns by contacting the Data Controller or, if unresolved, by contacting the Information Commissioner’s Office (ICO).

    POLICY REVIEW

    This policy will be reviewed annually or sooner if:

    • There are changes in legislation
    • New CCTV systems are installed
    • Operational purposes change