Privacy Policy

1. Introduction

This Privacy Policy explains how The Fringe Salon and Academy ("we", "us", or "our") collects, uses, and protects personal information when you visit or interact with our public website thefringesalonandacademy.com.

The website and its technical infrastructure are managed by NPATEL GROUP LTD, a UK-based company, acting on behalf of The Fringe Salon and Academy as a managed service provider.

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK GDPR and relevant international standards.

2. Our Privacy-First Approach

We operate a no data by default website.

Simply visiting or browsing our website does not result in the collection of personal data, technical identifiers, or behavioural tracking unless you explicitly choose to enable optional analytics or submit information yourself.

3. Information We Collect

3.1 Information We Do Not Collect Automatically

Unless you explicitly consent or submit a form, we do not:

• Log IP addresses
• Track device identifiers
• Perform server-side visitor logging
• Use fingerprinting or hidden tracking technologies
• Collect analytics or session recordings

3.2 Personal Information (Only When You Provide It)

We collect personal information only when you voluntarily submit it, such as through contact or enquiry forms. This may include:

• Name
• Email address
• Phone number
• Message content

3.3 Analytics Data (Only With Explicit Consent)

We use optional analytics tools only if you explicitly opt in via our cookie preference system:

• Google Analytics – website usage statistics
• Microsoft Clarity – session recording and usability insights

If you do not give consent, these tools remain fully disabled, and no analytics data is collected.

4. How We Use Your Information

We use personal data only for legitimate purposes, including:

• Responding to enquiries you submit
• Providing information about our services or courses
• Improving website performance and usability (only with consent)
• Complying with legal obligations
• Protecting our rights and systems

No automated decision-making or profiling is performed.

5. Legal Basis for Processing

We process personal data under the following lawful bases:

• Consent – for analytics and marketing communications
• Legitimate interest – responding to direct enquiries
• Legal obligation – where required by law

6. Data Storage and Security

Personal information submitted through forms is stored securely using Supabase, a secure cloud database service.

Security measures include:

• Encryption in transit and at rest
• Restricted access controls
• Industry-standard technical safeguards

The website and data processing infrastructure are hosted and managed in the United Kingdom by NPATEL GROUP LTD.

7. Third-Party Services

Where consent is given, the following third-party services may process data:

• Google Analytics – website analytics
• Microsoft Clarity – session recordings
• Zoho Mail – email communication

Each provider operates under its own privacy policy and data protection obligations.

8. Information Sharing

We do not sell or rent personal data.

Information may be shared only:

• With NPATEL GROUP LTD for website hosting and compliance management
• With trusted service providers necessary to operate the website
• When legally required
• With your explicit consent

9. Data Retention

We retain personal information only for as long as necessary to:

• Respond to enquiries
• Fulfil legal or contractual obligations
• Resolve disputes

Analytics data retention is governed by the respective third-party tools and only applies when consent is given.

10. Cookies and Tracking

Our website does not use cookies or tracking technologies by default.

Optional analytics cookies are activated only after you explicitly enable them via our cookie preference system. Full details are available in our Cookie Policy.

11. International Data Transfers

Where third-party services process data outside the UK, appropriate safeguards are in place to ensure compliance with applicable data protection laws.

12. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability

To exercise your rights, contact us using the details below.

13. Contact Information

Primary Data Controller:
The Fringe Salon and Academy
Email: compliance@thefringesalonandacademy.com

Managed by (Technical & Compliance):
NPATEL GROUP LTD
Email: compliance.thefringe@npatelgroup.ltd