Privacy Policy

Depending on how you interact with us, we may collect information including:

• Your name

• Email address

• Telephone number

• Appointment and booking information

• Treatment and service history

• Relevant consultation information provided by you

• Payment and transaction information

• Communications you send to us

• Marketing preferences

• Website usage information, including information collected through cookies and similar technologies

• Information you provide when enrolling in or enquiring about training through Twenty Nine Academy

We only collect information that is relevant and reasonably necessary for the services we provide.

We may use your personal information to:

• Manage, confirm and administer appointments

• Provide salon treatments and services

• Maintain appropriate client and treatment records

• Process payments and refunds

• Respond to enquiries, requests or complaints

• Communicate important information regarding appointments or services

• Manage academy enquiries, enrolments and training

• Send marketing communications where we have the appropriate permission or lawful basis to do so

• Improve our website, services and customer experience

• Maintain the security and operation of our website and systems

• Comply with our legal, accounting, tax and regulatory obligations

• Establish, exercise or defend legal claims where necessary

Under GDPR, we must have a lawful basis for processing your personal data.

Depending on the circumstances, we may process your information because:

Contract: Processing is necessary to provide a service you have requested, manage your appointment, enrolment or purchase.

Legal obligation: We are required to retain or process certain information to comply with Irish law, including tax and accounting requirements.

Legitimate interests: Processing is necessary for the legitimate operation and protection of our business, provided those interests do not override your rights and freedoms. This may include responding to enquiries, managing our business, improving our services and dealing with complaints.

Consent: Where required, we will ask for your consent, for example for certain marketing communications or non-essential website cookies. Where we rely on consent, you may withdraw that consent at any time.

We use third-party service providers to help operate our business, including systems used for appointment booking, client management and payment processing.

When you make an online booking or payment, certain personal information may be processed by these providers in order to complete your booking or transaction.

These providers may have their own privacy notices explaining how they process personal information.

Twenty Nine does not store your full debit or credit card details on our website.

If you have subscribed to our mailing list or otherwise agreed to receive marketing communications from us, we may use your name and email address to send you news, salon updates, offers, appointment information, academy information and other relevant communications.

You can unsubscribe from marketing emails at any time by using the unsubscribe link contained within our emails or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending essential communications relating to an appointment, booking, transaction or service you have requested.

Our website may use cookies and similar technologies to operate correctly, understand how visitors use the website and, where applicable, support analytics and marketing.

Some cookies are strictly necessary for the operation of the website. Other cookies, including certain analytics or advertising cookies, will only be used where the required consent has been obtained.

Where applicable, you can accept, reject or manage non-essential cookies through the cookie controls available on our website.

Further information about the specific cookies used on our website may be provided through our cookie settings or Cookie Policy.

We do not sell your personal information.

We may share personal information with trusted third-party providers where necessary to operate our business, including providers of:

• Appointment and client-management systems

• Payment processing

• Website hosting

• Email and marketing services

• IT and cloud services

• Accounting, professional and legal services

We may also disclose information where required by law or where reasonably necessary to establish, exercise or defend a legal claim.

We require service providers handling personal information on our behalf to protect that information appropriately and to process it in accordance with applicable data protection law.

Some of the third-party services we use may process or store personal information outside Ireland or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer complies with applicable data protection law and that appropriate safeguards are in place where required.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing our services and meeting legal, tax, accounting, insurance and regulatory requirements.

Different types of information may therefore be retained for different periods.

When information is no longer required, we will securely delete, anonymise or otherwise dispose of it where appropriate.

We take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

Access to personal information is limited to team members and service providers who require it for legitimate business purposes.

While we take reasonable steps to protect your information, no internet-based system can be guaranteed to be completely secure.

Under data protection law, you may have the right to:

• Request access to the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of your personal information in certain circumstances

• Request restriction of processing

• Object to certain processing

• Request the transfer of your information where applicable

• Withdraw consent where processing is based on consent

These rights are subject to certain legal conditions and exceptions.

To exercise any of these rights, please contact us using the details provided in this Privacy Policy.

You also have the right to make a complaint to the Data Protection Commission (DPC) in Ireland if you believe your personal information has been processed in breach of applicable data protection law.

Our website may contain links to third-party websites or services.

Twenty Nine is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy notice of any external website you visit.

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal obligations.

The latest version will be published on our website and the date at the top of this policy will be updated accordingly.

If you have any questions about this Privacy Policy, your personal information or your data protection rights, please contact:

Twenty Nine
Glenageary, Dublin, Ireland
Email: hello@twentynine.ie