Varndells Group Ltd is a high-end, luxury barbershop that offers a variety of men’s grooming services, primarily by appointment. This privacy notice provides you with details of how Varndells Group Ltd collects and processes your personal data.
Varndells Group Ltd, referred to as “we”, “us”, “our”, or “Varndells” in this privacy notice, is the data controller and is responsible for your personal data. We aim to maintain the highest possible standards and seek to adopt best practice with regards to the way in which we manage and process data.
Varndells Group Ltd collects, uses and processes personal information about you. When we do so, we adhere to the UK General Data Protection Regulation (GDPR), which was incorporated into UK law following Brexit, which is supported by the Data Protection Act 2018 (DPA 2018).
We are responsible as ‘controller’ of your personal information where you are the person named as the client or a data subject that provides us with consent to process your personal data for other reasons.
It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information changes by emailing us at spencer@varndellsgroup.com.
For further information regarding cookies please see our Cookie Policy.
We will take photographs and video for use on our website, newsletters, social media and other digital and offline promotional materials.
Photographs and video may be taken by any member of staff at Varndells Group Ltd or hired third parties. Further information will be readily available at the time of the image being taken. Images will be taken in accordance with Consent, or Varndells Group Ltd’s Event Terms and Conditions as appropriate.
The image itself will be shared in the public domain, but image rights remain with the image owner and/or Varndells Group Ltd as agreed.
This information will be stored on Varndells Group Ltd’s computer devices as well as on Varndells Group Ltd staff members’ mobile phones. Images may be transferred to our 3rd party contractors, who have signed a data protection agreement, via WeTransfer.
Locations are where your data is stored when using the
social platforms: Facebook and Instagram (United States and Sweden).
By clicking on the above links for each social media platform, you will access how each platform complies wit transfer requirements of the UK GDPR.
We would like to send you information about products, services and events that may be of interest to you as a Varndells client or subscriber.
If you consent to receiving such information, you can opt out at any time in the future. When you fill in a form or provide your details on our website, you will see one or more tick boxes allowing you to opt in to receive marketing communications from us by email, telephone, and text message.
If you consented to us using your information for marketing purposes, you have the right to withdraw that consent at any time by the following means:
We will not share your information for marketing purposes with any other organisation or third party without your explicit consent.
Other than as stated in the table above, we will share personal information with law enforcement or other authorities if required by applicable law.
As stated in the table above, Varndells Group Ltd’s staff are classified as third parties and your information will be shared with them in the following circumstances:
We may also need to share some categories of personal information with other third parties where we store or process your personal information, for the performance of the contract, via consent or via legitimate interest. These locations and providers are identified below.
We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/international-transfers-a-guide/
We share your personal data with Intuit (Mailchimp). This will involve transferring your data outside the European Economic Area (EEA) to the United States. Further information is available here: https://www.intuit.com/privacy/statement/.
We share your personal data with Canva. This will involve transferring your data outside the European Economic Area (EEA) to the United States, Australia, Singapore, Philippines and New Zealand. Further information is available here: https://www.canva.com/policies/privacy-policy/.
We share your personal data with Resurva to manage your bookings and process your payments. This will involve transferring your data outside the European Economic Area (EEA) to the United States. Further information is available here: https://resurva.com/privacy/
We share your personal data with 20i London to host the varndellsgroup.com website. Your data will be stored on their London-based servers. Further information is available here: https://www.20i.com/legal/20i-ltd-privacy-policy
We share your personal data with SmartDesignUK to maintain the varndellsgroup.com website. Further information is available here: https://smartdesignuk.com/
We share your personal data with our Varndells Barbers. Varndells Group Ltd Barbers are third parties bound by contract to protect and process your information safely and securely in line with Varndells Group Ltd’s privacy policy.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
We collect certain information or data about you when you use our website as varndellsgroup.com. We collect:
Information on how you use the site, using cookies and page tagging techniques. For more information on cookies and related technologies used on this site, and how to disable them, please read our Cookie Policy.
The data we collect on this site can be viewed by the Varndells Group Ltd team to:
Varndells Group Ltd is not making use of these messages or data other than to follow up on your enquiries and improve your website experience. Your personal information will be processed and transmitted in accordance with the UK General Data Protection Regulation (GDPR).
We store your data on secure servers in London, UK, with 20i London. Sending information over the internet is generally not completely secure, and we can’t guarantee the security of your data while it’s in transit. Any data you send is at your own risk. We have appropriate organisational and technical measures, procedures and security features in place to keep your data secure once we receive it.
Varndellsgroup.com contains links to other websites. This privacy statement only applies to Varndells Group Ltd location and varndellsgroup.com, and doesn’t cover other services and transactions that we link to. These services will have their own terms and conditions and privacy notices. If you go to another website from this one, we recommend that you read the privacy notice on that website to find out what it does with your information.
Under data protection law, you have rights including:
You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.
We will always seek to comply with your request. However, we may be required to hold or use your information to comply with legal duties. Please note that your request may delay or prevent us delivering a service to you.
To make a data protection rights request, please send an email to spencer@varndellsgroup.com or write to us at Varndells Group Ltd, Ground Floor, 114 High Street, West Malling, ME19 6LX.
For further information about your rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioners Office (ICO) on individuals’ rights under the General Data Protection Regulation: https://ico.org.uk/
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Varndells Group Ltd and its team have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way.
Varndells Group Ltd limits access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to contract and a duty of confidentiality.
We follow the ICO’s guidance and procedures to deal with any suspected data security breach.
We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Please contact spencer@varndellsgroup.com to exercise any of your rights, or if you have a complaint about why your information has been collected, how it has been used or how long we have kept it for.
You can contact us at spencer@varndellsgroup.com or by writing to: Varndells Group Ltd, 114 High Street, West Malling, ME19 6NE.
The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner (ICO).
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
This document was last reviewed: July 2024.
