Luxe Creative Media

The British Hair and Beauty Awards is operated by Luxe Creative Media, which is registered with the Information Commissioner’s Office (ICO) as the data controller for this competition

Data Protection Policy
Last Updated: October 2025


Purpose

The British Hair and Beauty Awards, operated by Luxe Creative Media, is committed to protecting the privacy and personal data of our entrants, clients, employees, and partners. This policy outlines how we collect, use, store, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


Scope

This policy applies to all personal data processed by The British Hair and Beauty Awards, including data collected through our website, online shop, awards entry system, marketing activities, and any other business operations conducted by Luxe Creative Media.


Principles of Data Protection

The British Hair and Beauty Awards adheres to the following data protection principles:

  • Lawfulness, Fairness, and Transparency
    We process personal data lawfully, fairly, and in a transparent manner.

  • Purpose Limitation
    Personal data is collected only for specific, explicit, and legitimate purposes.

  • Data Minimisation
    We collect only data that is adequate, relevant, and necessary for its intended purpose.

  • Accuracy
    Personal data is kept accurate and up to date.

  • Storage Limitation
    Personal data is retained only for as long as necessary for the purposes outlined in this policy.

  • Integrity and Confidentiality
    We process personal data securely to prevent unauthorised access, loss, or damage.


Personal Data We Collect

We may collect and process the following types of personal data:

  • Name, business name, and contact details (e.g., email address)

  • Payment details for awards entries, shop orders, or event tickets

  • Information submitted as part of awards applications or nominations (e.g., business description, category, images, testimonials, supporting evidence)

  • Website usage data, such as cookies, IP addresses, and analytics information

  • Marketing preferences and communication history


How We Use Personal Data

We use personal data to:

  • Process and manage awards entries, nominations, and shop orders

  • Communicate with entrants, sponsors, and partners regarding awards participation, results, or updates

  • Manage customer accounts, payments, and support enquiries

  • Improve our website, services, and user experience

  • Send marketing communications (where consent has been provided)

  • Comply with legal and financial obligations, including dispute resolution and record-keeping requirements


Sharing of Personal Data

We do not sell personal data. Data may be shared only when necessary with trusted third parties such as:

  • Payment processors and financial service providers

  • Delivery and courier companies (for shop orders or event materials)

  • Marketing and email service providers (for newsletters or announcements)

  • IT support and website hosting providers

All third parties are vetted to ensure they comply with UK GDPR and only process personal data under our instruction.

We may also share personal data where required by law, for example, with regulatory authorities or law enforcement agencies.


Data Retention

  • Awards Entries and Supporting Evidence: Retained for 12 months following the conclusion of each awards cycle.

  • Shop Orders and Transaction Records: Retained for 6 years in line with HMRC financial record-keeping and audit requirements.

  • Marketing and Communication Data: Retained until consent is withdrawn or the data becomes inactive.

Once the retention period has passed, all personal data will be securely deleted or anonymised.


Data Security

Luxe Creative Media and The British Hair and Beauty Awards use a range of technical and organisational measures to protect personal data, including:

  • Secure, encrypted payment gateways and data transmission

  • Restricted access to personal data for authorised personnel only

  • Encrypted data storage and secure backup systems

  • Regular reviews of data security procedures and policies

  • Secure disposal or anonymisation of data once no longer required


Your Rights

Under UK GDPR, individuals have the right to:

  • Access: Request a copy of the personal data we hold about you

  • Rectification: Request corrections to inaccurate or incomplete data

  • Erasure: Request deletion of your personal data (where applicable)

  • Restrict Processing: Limit how your data is used in specific circumstances

  • Data Portability: Request the transfer of your data to another service provider

  • Object: Object to processing for direct marketing or other legitimate interests


How to Make a Request

To exercise any of your rights or to make an enquiry about your personal data, please contact:

Email: bbaawards@luxecreativemedia.co.uk

We may require proof of identity before processing your request.


Cookies

Our website uses cookies to enhance user experience and collect website performance data. By using our website, you consent to our use of cookies in accordance with our [Cookie Policy].


Data Breaches

In the unlikely event of a data breach, we will:

  1. Investigate and contain the breach immediately

  2. Notify affected individuals where legally required

  3. Report the breach to the Information Commissioner’s Office (ICO) within the required timeframe, if necessary


Changes to This Policy

We may update this policy from time to time to reflect changes in legal requirements or our business operations. The most recent version will always be available on our website. Where significant changes are made, we will notify individuals directly when appropriate.


Contact Information

For questions, concerns, or complaints about this Data Protection Policy or our data handling practices, please contact:

Email: bbaawards@luxecreativemedia.co.uk