Your booking system holds names, phone numbers, colour formulas, patch test results, and the health answers from every consultation card. That's more personal data than most shops on your street hold, some of it in the most protected legal category there is, and the rules around it only ever come up on a bad day: a complaint, a breach, or a stylist walking out with the client list. Better to know where you stand on a quiet Tuesday.

What's actually in your system

The contact details are the obvious part. The consultation card is where it gets serious, because allergies, medication and skin conditions count as special category data under UK data protection law, the same tier as medical records. You're allowed to hold that information, and holding it well is part of running a safe salon, but it carries a higher bar: a stronger reason to collect it, tighter limits on who sees it, and more care about where it ends up.

Why you're allowed to keep it

Records you need to deliver the service and keep the client safe sit on solid ground. The colour history, the patch test record, the note about a scalp condition all exist so the next appointment is done properly, and your insurer expects the patch test record to exist for years. Marketing sits on entirely different ground, and the mistake most salons make is treating the two as one pile. Service records are kept because the service needs them; marketing contact happens only because the client agreed.

Marketing texts and emails need a yes

A client who gave you her mobile number so you could confirm her appointment has agreed to appointment messages, and to nothing else. Before she gets the Black Friday offer, you need an opt-in: recorded, dated, and easy to reverse. "She's a regular, she won't mind" is the sentence that precedes most complaints to the ICO about small businesses.

In practice this means a consent question at the first appointment, stored against the client record with the date, and an unsubscribe route that works. If your current system can't tell you which clients opted in and when, that's worth discovering before a complaint asks the question for you.

How long to keep it

Long enough to serve the client and cover your liability, and no longer than you can justify. Colour history and patch test records earn their keep for years, because your insurance may need them long after the client stops coming. The client who hasn't been in since 2019, with no outstanding anything, is a record you should have a plan for. Set a retention period, write it down, and actually apply it once a year, because "we keep everything forever" is a policy, just not a defensible one.

When a client asks for their data

Any client can ask for a copy of everything you hold on her. You have one month, you can't charge for it, and it includes the notes, which is worth remembering when writing them. The comment a stylist taps into a client record reads differently when the client is holding a printout of the client record.

Find out how your software exports a single client's data before anyone asks. If the honest answer is screenshots and copy-paste, or a support ticket to the vendor, you've learned something about the software as well as the process, and data export is one of the classic gotchas worth checking on any system.

When a stylist leaves

The client list belongs to the salon, and that stays true even for the clients she brought in and the regulars who only ever book with her. A departing stylist photographing the diary or exporting her column's contact details is taking the salon's data, and the salon carries the legal exposure for where that data goes next, which makes it your problem twice over.

The practical control is access. The moment notice is handed in, ask what she can currently see and export, and adjust it. One shared login for the whole team makes that impossible, along with making it impossible to know who looked at what, which is why per-person logins with per-role permissions matter more in the last fortnight of an employment than at any other time.

The everyday risks

  • The client list on a personal phone. Numbers saved to a stylist's own contacts leave with the phone, and with the stylist.
  • Formulas and photos in a WhatsApp group. Convenient, and now a client's colour history and face live on six personal handsets outside any system you control.
  • The spreadsheet emailed home. Every copy outside the system is a copy nobody will remember to delete.
  • One shared login. No record of who did what, no way to remove one person's access, and one password known by everyone who has ever worked a Saturday for you.

Each of these is normal salon behaviour, and each is the salon's liability rather than the individual's. The fix is less about rules on a wall and more about making the compliant route the convenient one, so the formula gets written in the client record because that's genuinely the easiest place to find it again.

If something goes wrong

A breach that risks people's rights, a stolen laptop with unencrypted client data on it, say, has to be reported to the ICO within 72 hours of you becoming aware. That clock includes weekends, so decide now who makes that call and where the ICO's reporting page is, because a Saturday evening discovery leaves no time to start researching the process. Minor incidents with no real risk need logging internally rather than reporting, and the ICO's own guidance walks through the difference.

A short checklist

Who on your team can see the health notes, and does that match who needs to? Could you export one client's complete record tomorrow morning? Which clients have a recorded marketing opt-in with a date on it? When did you last delete anything? And is the salon registered with the ICO and paying the small annual data protection fee, which most salons owe and some have never heard of?

Software holds the records, the consents and the permissions, and good software makes each of these questions a thirty-second answer, which is worth weighing if you're changing systems. What no software does is run the process for you. The retention decision, the access decision and the 72-hour phone call all belong to the salon owner, and knowing that is most of the job.