Short answer
Under UK law and GDPR, your salon clients own their personal data, and they have the right to control how it is used. As a salon owner, you act as the data controller, meaning you're responsible for keeping this information secure and letting clients access or delete it when they ask.
Data ownership versus data control
Under UK data protection laws, nobody strictly owns personal data in the way you own a styling chair. Instead, the individual has legal rights over their own information.
As the salon owner, you act as the data controller, deciding how and why details are gathered. The software platform you use acts as the data processor. They store and organise records on your behalf, but they can't use that information for their own purposes.
What to check in your software contract
The real problem arises when you're trying to leave a supplier. Some contracts make retrieving your records difficult, or charge high fees for exports.
Before signing with a supplier, look for these key terms:
With Luminate, you have full control. Owners and administrators can export the entire salon, or one customer, as a ZIP in JSON or CSV format. Reports also export to CSV and PDF, letting you download your data at any time.
- Export rights. Verify you can download your database at any time. Client lists, formulas, and booking histories must remain accessible.
- Standard formats. Check if you can export files as standard CSV or JSON files, avoiding proprietary formats that other systems can't read.
- Cancellation terms. Contracts that auto-renew or require long notice periods can lock you into paying for a system you want to leave.
Handling client requests under GDPR
Since clients have legal rights over their information, you must act on their requests. Under the UK GDPR, you have legal responsibilities that you can't ignore.
If a client asks to see their records, you must provide a copy. If they ask to be forgotten, you must delete their details from your database unless you have a legal or insurance reason to retain their files. For instance, you should keep colour formulation and skin test records to protect your business in case of a claim.
If you're unsure about a specific legal request, check with your insurer or a professional advisor. Luminate includes built-in GDPR tools to help you locate and delete individual records. All data is hosted securely in the UK and EU, fully encrypted with regular backups.
Moving your database between systems
If you decide to switch software, migrating your records doesn't have to feel daunting. Many owners worry about losing client formulas and contact details during the move.
Luminate handles the migration process. The support team runs the migration before you've entered data by hand into your fresh owner account.
Once imported, check your settings. Services arrive bookable online and deposit-free, and staff members arrive on the roster.
- Send your details. Contact hello@luminate.salon with details of your current system.
- Prepare the files. The team helps prepare the data as a ZIP of JSON files.
- Run a validation pass. A dry run checks every record to catch errors before writing any data.
- Complete the import. The import runs inside a single database transaction, meaning it either imports everything or rolls back entirely to avoid partial data.
What this means for your salon
To protect your business, treat your client database as a valuable asset that you control. Choose a system like Luminate that offers monthly billing with no contract, and lets you export your data at any time. When your records are secure and fully portable, you can focus on running your salon without being locked into a system that doesn't serve you.