1. Who We Are (Data Controller)

SP Korter (“we”, “us”, or “our”), representing Service Providers Korter, operates a London-focused hair and beauty discovery directory and booking platform. For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, SP Korter is the Data Controller for personal data processed through our platform.

Contact email for privacy and data requests: privacy@spkorter.com.

2. Personal Data We Collect

• Clients Booking Appointments: When you book an appointment, we collect your full name, email address, UK telephone number, requested service, and optional booking notes.
• Registered Stylists: When you sign up or claim a profile, we collect your name, email address, password (stored securely as a cryptographic bcrypt hash), bio, services offered, price ranges, deposit settings, and profile imagery you upload.
• Directory Listings (Unclaimed): To operate an accurate London artisan directory, our catalog includes publicly accessible professional details such as business trading name, Instagram handle, London borough, and styling specialties.
• Technical & Session Data: We store a session token in your browser's local storage to keep stylists signed in, and (for clients) a private link to each booking you make so you can manage it later on the same device. We do not sell tracking data or use cross-site advertising cookies.
• Removal & Report Requests: If you submit a removal, copyright or report request, we store the name, email address and details you provide so we can action and respond to it.

3. Legal Bases for Processing (UK GDPR Art. 6)

• Contractual Necessity: To process client appointment bookings, provide booking confirmation links, and enable stylists to manage their calendar.
• Legitimate Interests: To operate, curate, and maintain a public directory of hair and beauty businesses in London, celebrate independent artisans, and connect clients with local services.
• Legal Compliance: To comply with legal obligations, prevent spam or abuse via rate limiting, and respond to lawful regulatory requests.

4. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personal data. We only share information in the following limited circumstances:

• With Your Chosen Stylist: When a client books an appointment, client contact details (name, email, phone) are transmitted to the chosen stylist to fulfill the appointment.
• Infrastructure Providers: Our database and file storage are hosted by Supabase (PostgreSQL with Row Level Security) and our website is served by Vercel. Fonts and icons are loaded from Google Fonts, which means your IP address is shared with Google when a page loads. These providers process data on our behalf and may do so outside the UK under appropriate safeguards.

5. Your Rights Under UK GDPR

Under UK data protection law, you have statutory rights regarding your personal information:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request that we delete your account, booking records, or directory listing.
• Right to Object: If you are a stylist listed in our public directory and wish to be removed, you can object at any time.

Stylists can permanently delete their account (and linked profile) at any time from the bottom of their dashboard. Stylists wishing to remove only their directory listing, or anyone wishing to report content, can use our dedicated Directory Removal & Opt-Out Portal .

6. Data Retention

We retain booking data only for as long as necessary to administer appointments and resolve customer queries. Stylist account data is retained while the profile remains active. When an account or listing removal is requested, personal data is permanently deleted from our active database.

7. Complaints & The ICO

If you have concerns about our data practices, we ask that you contact us first at privacy@spkorter.com so we can resolve the matter immediately. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) at ico.org.uk.