Luxe Creative Media
The British Hair and Beauty Awards is operated by Luxe Creative Media, which is registered with the Information Commissioner’s Office (ICO) as the data controller for this competition
Data Protection Policy
Last Updated: October 2025
Purpose
The British Hair and Beauty Awards, operated by Luxe Creative Media, is committed to protecting the privacy and personal data of our entrants, clients, employees, and partners. This policy outlines how we collect, use, store, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Scope
This policy applies to all personal data processed by The British Hair and Beauty Awards, including data collected through our website, online shop, awards entry system, marketing activities, and any other business operations conducted by Luxe Creative Media.
Principles of Data Protection
The British Hair and Beauty Awards adheres to the following data protection principles:
-
Lawfulness, Fairness, and Transparency
We process personal data lawfully, fairly, and in a transparent manner. -
Purpose Limitation
Personal data is collected only for specific, explicit, and legitimate purposes. -
Data Minimisation
We collect only data that is adequate, relevant, and necessary for its intended purpose. -
Accuracy
Personal data is kept accurate and up to date. -
Storage Limitation
Personal data is retained only for as long as necessary for the purposes outlined in this policy. -
Integrity and Confidentiality
We process personal data securely to prevent unauthorised access, loss, or damage.
Personal Data We Collect
We may collect and process the following types of personal data:
-
Name, business name, and contact details (e.g., email address)
-
Payment details for awards entries, shop orders, or event tickets
-
Information submitted as part of awards applications or nominations (e.g., business description, category, images, testimonials, supporting evidence)
-
Website usage data, such as cookies, IP addresses, and analytics information
-
Marketing preferences and communication history
How We Use Personal Data
We use personal data to:
-
Process and manage awards entries, nominations, and shop orders
-
Communicate with entrants, sponsors, and partners regarding awards participation, results, or updates
-
Manage customer accounts, payments, and support enquiries
-
Improve our website, services, and user experience
-
Send marketing communications (where consent has been provided)
-
Comply with legal and financial obligations, including dispute resolution and record-keeping requirements
Sharing of Personal Data
We do not sell personal data. Data may be shared only when necessary with trusted third parties such as:
-
Payment processors and financial service providers
-
Delivery and courier companies (for shop orders or event materials)
-
Marketing and email service providers (for newsletters or announcements)
-
IT support and website hosting providers
All third parties are vetted to ensure they comply with UK GDPR and only process personal data under our instruction.
We may also share personal data where required by law, for example, with regulatory authorities or law enforcement agencies.
Data Retention
-
Awards Entries and Supporting Evidence: Retained for 12 months following the conclusion of each awards cycle.
-
Shop Orders and Transaction Records: Retained for 6 years in line with HMRC financial record-keeping and audit requirements.
-
Marketing and Communication Data: Retained until consent is withdrawn or the data becomes inactive.
Once the retention period has passed, all personal data will be securely deleted or anonymised.
Data Security
Luxe Creative Media and The British Hair and Beauty Awards use a range of technical and organisational measures to protect personal data, including:
-
Secure, encrypted payment gateways and data transmission
-
Restricted access to personal data for authorised personnel only
-
Encrypted data storage and secure backup systems
-
Regular reviews of data security procedures and policies
-
Secure disposal or anonymisation of data once no longer required
Your Rights
Under UK GDPR, individuals have the right to:
-
Access: Request a copy of the personal data we hold about you
-
Rectification: Request corrections to inaccurate or incomplete data
-
Erasure: Request deletion of your personal data (where applicable)
-
Restrict Processing: Limit how your data is used in specific circumstances
-
Data Portability: Request the transfer of your data to another service provider
-
Object: Object to processing for direct marketing or other legitimate interests
How to Make a Request
To exercise any of your rights or to make an enquiry about your personal data, please contact:
Email: bbaawards@luxecreativemedia.co.uk
We may require proof of identity before processing your request.
Cookies
Our website uses cookies to enhance user experience and collect website performance data. By using our website, you consent to our use of cookies in accordance with our [Cookie Policy].
Data Breaches
In the unlikely event of a data breach, we will:
-
Investigate and contain the breach immediately
-
Notify affected individuals where legally required
-
Report the breach to the Information Commissioner’s Office (ICO) within the required timeframe, if necessary
Changes to This Policy
We may update this policy from time to time to reflect changes in legal requirements or our business operations. The most recent version will always be available on our website. Where significant changes are made, we will notify individuals directly when appropriate.
Contact Information
For questions, concerns, or complaints about this Data Protection Policy or our data handling practices, please contact:
Email: bbaawards@luxecreativemedia.co.uk