This Privacy Policy explains how we collect, use and protect your personal data when you visit this website or make an enquiry.

We are committed to protecting your privacy and handling your data in a transparent, lawful and secure way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

This website is operated by MHM Styling Limited (trading as Melanie Herriot).

For the purposes of data protection law, we are the Data Controller responsible for your personal data.

If you have any questions about this policy or how your data is handled, you can contact us.

2. What Personal Data We Collect

We only collect the personal data necessary to respond to enquiries and understand how our website is used.

a) Enquiry Forms

When you submit an enquiry through the website, weccollect:

• Your name

• Your email address

• Any information you choose to include in your message

We do not collect sensitive personal data.

b) Website Analytics

We use Google Analytics to understand how visitors use our website. This helps us improve content and performance.

Google Analytics may collect:

• Anonymised IP address

• Device type and browser

• Pages visited and time spent on the site

This data is aggregated and does not identify you personally.

3. How We Use Your Data

We use your personal data only for the following purposes:

• To respond to enquiries and communicate with you

• To improve our website and user experience

• To monitor website performance and usage trends

We do not use your data for marketing purposes unless you have explicitly consented.

4. Legal Basis for Processing

Under GDPR, we rely on the following lawful bases:

• Legitimate interest – responding to enquiries and running our business effectively

• Consent – for analytics cookies (where applicable via cookie banner)

You can withdraw consent at any time through your browser or cookie settings.

5. How Your Data Is Stored

Your enquiry data is stored securely via:

• Squarespace’s built-in form and hosting systems

• Email correspondence used to respond to enquiries

We only retain personal data for as long as necessary to deal with your enquiry or as required for legal or accounting purposes.

6. Data Sharing

We do not sell, trade or rent your personal data.

Your data may be processed by trusted third-party services strictly necessary to operate the website, including:

• Squarespace (website hosting and forms)

• Google Analytics (website performance analytics)

All third-party providers are GDPR-compliant and process data under appropriate safeguards.

7. International Transfers

Some services we use (such as Google Analytics) may process data outside the UK or EEA. Where this happens, appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

8. Cookies

This website uses cookies for basic functionality and analytics.

You can control or disable cookies through your browser settings or via the cookie consent banner where provided.

9. Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data

• Object to or restrict processing

• Withdraw consent at any time

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data from loss, misuse or unauthorised access.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, with the updated date shown below.

Last updated: 20.01.2026