Privacy notice

Last updated: 13 August 2026

1. Who We Are

This Privacy Policy explains how Myla and Davis look after your personal information when you visit one of our salons, book or receive a service or treatment, purchase products, use our website or digital channels, contact us, or apply for a job.

The website and services are operated by M&D HERNE HILL LTD, trading as Myla and Davis, a company registered in England and Wales under company number 06052680.

Our registered address is:

Myla and Davis
163 Herne Hill
London
SE24 9LR

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Myla and Davis is the data controller responsible for your personal data.

In this Privacy Policy, “we”, “us” and “our” means Myla and Davis, and “you” and “your” means the individual whose personal data we process.

2. What This Privacy Policy Covers

This Privacy Policy explains:

What information we collect about you
How we use your personal information
The lawful bases on which we process your information
Who we share your information with
Marketing communications
WhatsApp Business communications
Employment information
Payment information
How long we keep your information
Where your information is stored and transferred
How we protect your information
Your rights and how to exercise them
Cookies
Links to other websites
Changes to this Privacy Policy
How to contact us

“Personal data” means information relating to an identified or identifiable individual.

3. What Information We Collect About You

We collect information about you when you:

Book an appointment for a service or treatment
Visit one of our salons
Receive a service or treatment
Purchase products
Contact us by telephone, email, online or in person
Communicate with us through digital messaging services, including WhatsApp
Use our website or digital channels
Complete surveys or provide feedback
Apply for employment with us

The information we collect may include:

Contact and appointment information

This may include your:

Name
Address
Email address
Telephone number
Date of birth
Gender
Appointment and booking history
Relevant information contained within your client profile
Information you choose to provide to us when communicating with us

Treatment and health information

Where relevant to the services or treatments we provide, we may collect information about allergies, pregnancy, skin conditions, previous treatments, patch or allergy tests, or other health-related information which may indicate that a particular service, treatment or product should not be provided or used.

We will only collect and use health and medical information where we have an appropriate lawful basis to do so and, where required, your explicit consent.

Payment and transaction information

We may collect information relating to payments and transactions made for our services and products.

Payments made through our website or booking systems may be processed by third-party payment providers, including Stripe. Payment information is handled in accordance with applicable payment security standards.

Our salon team does not have access to your full card details.

Website and technical information

When you use our website, we may automatically collect information including:

IP address
Browser type and settings
Device information
Date and time of website requests
Information about how you use and interact with our website

Employment information

If you apply for a job with us, we may collect information contained in your application, CV, covering letter, references and other information you provide as part of the recruitment process.

For clients under the age of 16, we will only collect and use their personal information where appropriate consent has been provided by a parent, carer or guardian.

4. How We Use Your Personal Information

We use your personal information for the following purposes:

Providing our services

We use your information to:

Manage and administer your appointments
Confirm and remind you about appointments
Provide the services and treatments you have requested
Maintain appropriate client and treatment records
Contact you about your appointments
Respond to your enquiries
Manage waiting lists
Provide customer support
Process purchases and payments
Administer our cancellation policy
Suggest suitable appointments where you have asked to be placed on a waiting list

Improving our services and website

We may use information to:

Administer and improve our website and digital channels
Understand how customers interact with our website
Conduct analytics and statistical analysis
Improve our services and customer experience
Troubleshoot technical problems
Test and develop our systems
Conduct surveys and research
Maintain the security of our website, systems and information

Where appropriate, we may anonymise or aggregate information so that it can no longer identify you. We may use anonymised or aggregated information for internal business, statistical and market research purposes.

Legal, security and fraud prevention purposes

We may process your information where necessary to:

Comply with our legal and regulatory obligations
Prevent or detect fraud, abuse or illegal activity
Protect our customers, staff, contractors and business
Protect our property, systems and information
Enforce our terms, conditions and policies
Enforce our cancellation policy
Establish, exercise or defend legal claims
Respond to requests from courts, regulators, government bodies or law enforcement authorities

5. Our Lawful Bases for Processing Your Information

Under applicable data protection law, we must have a lawful basis for processing your personal data.

Depending on the circumstances, we may process your information because:

It is necessary to perform our contract with you

For example, to manage your appointment, provide a service or treatment, process a purchase or communicate with you about your booking.

It is necessary for our legitimate interests

We may process your information where this is necessary for legitimate business or commercial purposes, provided that our interests are not overridden by your rights and interests.

Examples include administering our website, improving our services, preventing fraud, maintaining security, dealing with enquiries and managing our business.

You have given your consent

Where consent is required, we will ask you for it. This may include consent to receive certain marketing communications or to process certain health-related information.

You can withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew it.

We have a legal obligation

We may process your information where necessary to comply with a legal, regulatory, accounting or reporting obligation.

6. Who We Share Your Information With

We may share your personal information with selected third parties where necessary to operate our business and provide our services.

These may include:

Phorest, our salon booking and management software provider
Stripe, our payment service provider
WordPress and relevant website service providers
Harding, where applicable as a website or technology supplier
IT, hosting and technical support providers
Website analytics providers
Marketing and CRM providers
Digital messaging and communications providers
Telecom operators and communications service providers
Professional advisers, where necessary
Government authorities, courts, regulators or law enforcement agencies where legally required

Where third-party suppliers process personal data on our behalf, we require them to process it only in accordance with our instructions and to maintain appropriate security and confidentiality measures.

Some individuals working with Myla and Davis are self-employed. Where software systems or reception facilities are shared, self-employed colleagues may have access to relevant client information where this is necessary to provide services to you.

We will not otherwise share your personal information with third parties without your consent unless we are legally permitted or required to do so, including where necessary to prevent fraud, protect our business or enforce our legal rights.

7. WhatsApp Business and Digital Communications

We may use WhatsApp Business, SMS and other digital messaging services to:

Send appointment confirmations
Send appointment reminders
Provide appointment updates
Respond to customer enquiries
Communicate with you about services you have requested

If you choose to communicate with us using WhatsApp, your name, telephone number and the content of your messages may be processed for the purpose of providing our services and managing your appointments.

WhatsApp Business is provided by Meta Platforms, which processes certain information in accordance with its own privacy policy.

If you would prefer not to receive communications from us via WhatsApp, please let us know. We will discuss alternative methods of communication where available.

8. Marketing

We would like to send you information about products, services, events and offers that may be of interest to you.

This may include our quarterly newsletter and other marketing communications.

Where required by law, we will ask for your consent before sending marketing communications.

If you have consented to receive marketing communications, you can withdraw your consent at any time.

Every email newsletter will contain an unsubscribe or opt-out link. You can also contact your chosen salon directly to request that we stop sending marketing communications.

You can contact us using the relevant salon email address:

hernehill@mylaanddavis.co.uk
brixton@mylaanddavis.co.uk
eastdulwich@mylaanddavis.co.uk
croftonpark@mylaanddavis.co.uk

You have the right to object to the processing of your personal information for direct marketing at any time.

If you ask us to stop marketing to you, we may retain limited information necessary to ensure that we respect your request and do not send you unwanted marketing communications.

9. Payment Information

Payments made through our website or booking systems may be processed by third-party payment providers, including Stripe.

Payment information submitted through these services is securely processed and encrypted using appropriate industry standards.

We do not directly store your full debit or credit card details. Payment providers may retain or tokenise payment information where necessary to process payments or support future transactions.

Where permitted and necessary under our cancellation policy, payment or card information may be retained by the relevant payment provider or booking system to secure future appointments or process applicable charges.

You may ask us not to retain payment information where this option is available. If you do so, you may need to provide your payment details again for future bookings or purchases.

10. Employment

If you apply for employment with Myla and Davis, we will use the information you provide for recruitment and employment-related purposes.

Information collected about employees and the purposes for which it is used, including information shared with employees and third parties, is also governed by applicable employment contracts, policies and our employee handbook.

Information about unsuccessful job applicants will normally be deleted after four months, unless we have a lawful reason to retain it for longer.

11. How Long We Keep Your Information

We will keep your personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, or for as long as required by applicable legal, regulatory, accounting or reporting requirements.

As a general guide:

Customer records are retained for up to six years from the last transaction, where necessary for legal, regulatory, accounting, operational or other legitimate purposes.
Certain treatment and allergy-test records may be retained for four years, where necessary for client safety and appropriate record keeping.
Information relating to unsuccessful job applicants is normally deleted after four months.
Marketing information may be retained while you continue to consent to receiving marketing communications. You can unsubscribe at any time.
Certain information may need to be retained for longer where required by law or where necessary to establish, exercise or defend legal claims.

When the applicable retention period expires, we will securely delete or destroy your personal information in accordance with applicable laws.

Where appropriate, we may anonymise information so that it can no longer be associated with you. Anonymised information is no longer considered personal data.

12. Where Your Information Is Stored

Some of your information is stored on secure servers provided by our service providers.

Our salon booking and management system, Phorest, stores information within the European Economic Area where applicable.

Some of our service providers may process or store personal information outside the UK or European Economic Area, including in the United States.

When we transfer personal data outside the UK or EEA, we will take appropriate steps to ensure that your personal data continues to receive an appropriate level of protection in accordance with applicable data protection law.

This may include using appropriate contractual safeguards, such as standard contractual clauses or other legally recognised transfer mechanisms.

If you would like further information about international transfers or the safeguards we use, please contact us using the details below.

13. Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised or unlawful access, accidental loss, destruction or damage.

Where you use a password or other login credentials to access our website or a third-party platform, you are responsible for keeping those details confidential and should not share them with anyone else.

Unfortunately, transmission of information over the internet or public communications networks can never be guaranteed to be completely secure. While we take appropriate steps to protect your information, we cannot guarantee the absolute security of information transmitted online.

14. Your Personal Data Protection Rights

Under applicable data protection law, you may have the following rights:

Right of access

You can ask us whether we are processing your personal information and, if so, request a copy of the information we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete personal information.

Right to erasure

In certain circumstances, you can ask us to delete your personal information.

We may retain or continue processing certain information where we have a legal obligation or legitimate reason to do so.

Right to restrict processing

In certain circumstances, you can ask us to restrict or suspend the processing of your personal information.

Right to data portability

Where applicable, you can ask us to provide personal information that you have provided to us in a structured, commonly used and machine-readable format, or ask us to transfer it to another organisation.

Right to object

You may object to processing based on our legitimate interests where you have grounds relating to your particular circumstances.

You can also object at any time to the processing of your personal information for direct marketing.

Right to withdraw consent

Where we rely on your consent to process your personal information, you can withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before we received your request.

15. How to Exercise Your Rights

If you would like to request access to your personal information, correct information you believe is inaccurate, object to processing, request deletion or exercise any other applicable data protection right, please contact:

Email: holly@mylaanddavis.co.uk

We may need to verify your identity before responding to a request.

We will respond to your request within the timeframe required by applicable data protection law.

16. Complaints

If you have concerns about the way we collect, use or handle your personal information, please contact us first using:

holly@mylaanddavis.co.uk

You also have the right to complain to the UK’s data protection regulator:

Information Commissioner’s Office (ICO)

The ICO is the UK’s independent supervisory authority responsible for upholding information rights.

You may also have the right to complain to another competent data protection authority where applicable.

17. Cookies

Our website uses cookies and similar technologies.

Cookies are small text files placed on your device which can collect information about how you use a website. We use cookies and similar technologies to help provide a good user experience, understand website usage, improve our website and compile statistical information about website activity.

You can configure your browser to refuse cookies or delete cookies that have already been stored on your device.

Please note that disabling certain cookies may mean that some features of our website do not function correctly.

For further general information about cookies, you can visit:

AboutCookies.org
AllAboutCookies.org

Please also see our Cookie Policy for further information about the cookies and similar technologies used on our website.

18. Other Websites

Our website may contain links to other websites operated by third parties.

This Privacy Policy applies only to Myla and Davis and our websites and services. We are not responsible for the privacy practices or content of third-party websites.

We recommend that you read the privacy policy of any third-party website you visit.

19. Changes to This Privacy Policy

We keep this Privacy Policy under regular review.

If we make changes, we will publish the updated version on our website and update the “Last updated” date at the top of this policy.

This Privacy Policy was last updated on 13th August 2026.

20. Contact Us

If you have any questions about this Privacy Policy, the personal information we hold about you, or the way we use your information, please contact:

Myla and Davis
163 Herne Hill
London
SE24 9LR