Sophie's
SalonWholesaleAcademy
DashboardSign inBook now
Sophie's

Privacy Notice

Last updated: 19 June 2026

1. Who we are

Sophie's is a hair and nails salon, wholesale trade supplier and training centre on the Isle of Man. Sophie's is a business name registered in the Isle of Man under the Registration of Business Names Acts 1918 and 1954, registration number 031863B. The business is owned and run by Sophie Corlett, trading from 69 Greenlands Avenue, Ramsey, Isle of Man, IM8 2PQ. We are registered with the Isle of Man Information Commissioner as a data controller. This Privacy Notice applies to our website at sophies.im, our online shop and booking, and any communications between you and Sophie's. For data protection purposes, Sophie Corlett, trading as Sophie's, is the controller of your personal data. If you have questions about how we handle your data, you can contact us at [email protected].

2. What data we collect

We collect and process the following categories of personal data:

Account data

Your name and email address, used to create and manage your account and to keep you updated about your bookings and orders.

Trade account data

If you apply for a trade account, we collect your business name, business contact details, and the qualification or registration details we need to confirm you are eligible for wholesale prices.

Booking and order data

Details of the appointments you book, the products you order, and the courses you enrol on, including dates, amounts and order history. This is the core information you manage through your account.

Documents you upload

Any documents you send us, such as proof of qualification for a trade account, stored securely with an EU-based cloud storage provider.

Payment data

When you pay for an order, a deposit or a course, payment is processed through our payment provider. We do not store your card details; the payment provider handles all payment information directly.

Technical data

Authentication tokens and basic device information to keep your account secure and support the website on your devices. This includes the sign-in cookie and the browser storage described in section 9.

3. How we use your data

We process your personal data on the following legal bases under the Applied GDPR:

Contract performance

Most of the data we process is necessary to provide our service: managing your account, taking and fulfilling your bookings and orders, running course enrolments, and checking trade-account eligibility.

Legitimate interest

We use technical data to maintain security, prevent fraud, and improve the service. We balance our interests against your rights and only process data where the impact on you is minimal.

Legal obligation

We may keep certain records where required by Isle of Man tax or company law.

4. Who we share your data with

We share your data with the following categories of service providers who help us run Sophie's:

  • Hosting infrastructure providers (EU-based), to run the website and online services
  • Cloud storage providers (EU-based), to store any documents you upload securely
  • Payment processors, to take payments for orders, deposits and courses
  • Email service providers, to send you transactional emails such as account verification, booking confirmations and order updates
  • Professional advisers, our legal, accounting and other professional advisers where necessary
  • Regulatory and legal authorities, where we are required to do so by law

We will never sell your personal data to third parties.

5. International data transfers

Your data is stored and processed within the European Union, which has an adequate level of data protection recognised by the Isle of Man. We do not routinely transfer your personal data outside the EU or the Isle of Man. Where any transfer is necessary, we ensure appropriate safeguards are in place.

6. How long we keep your data

We keep your data for as long as your account is active and you continue to use our service. If you close your account, we will remove your personal data within 30 days, except where we are required to keep records for legal purposes (for example, order and payment records may be kept for up to 6 years to meet Isle of Man accounting and tax requirements).

7. Data security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it, including: • Encryption of data in transit and at rest • Access controls to limit who can view your data • Regular review of our security practices In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Isle of Man Information Commissioner and, where required, notify you without undue delay.

8. Your rights

Under the Applied GDPR, you have the right to:

  • Access - request a copy of the personal data we hold about you
  • Rectification - ask us to correct any inaccurate data
  • Erasure - ask us to delete your data (subject to legal retention requirements)
  • Restriction - ask us to limit how we process your data
  • Portability - receive your data in a portable format
  • Objection - object to our processing of your data
  • Withdraw consent - where we rely on consent, you can withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Isle of Man Information Commissioner: Isle of Man Information Commissioner P.O. Box 69, Douglas, Isle of Man, IM99 1EQ Telephone: +44 1624 693260 Email: [email protected] Website: https://inforights.im

9. Cookies and browser storage

Sophie's uses one strictly necessary cookie. It is called "refresh", it keeps you signed in between visits, and it is sent only to our sign-in endpoints. It cannot be read by scripts (HttpOnly), travels only over an encrypted connection (Secure), and is restricted to requests coming from our own site (SameSite=Lax). We do not use any tracking, analytics or advertising cookies, so no cookie consent banner is required. We also keep a small amount of information in your own browser. It stays on your device and is not sent to us: • Local storage: your appearance preference (light or dark), and whether you have already seen or dismissed the prompt to install the app to your home screen. • Session storage: the details of a booking you are part-way through, so you do not lose them as you move between steps. This is cleared when you close the tab. • An offline cache, created by the website's service worker, holding our own page and image files so the site loads quickly and keeps working on a poor connection. You can clear all of this at any time through your browser settings. Doing so will sign you out and reset those preferences.

10. Children

Our online services, including booking and the trade shop, are intended for adults. Bookings for under-16s should be made by a parent or guardian. We do not knowingly collect personal data from children under 16 through the website.

11. Changes to this notice

We may update this Privacy Notice from time to time. If we make material changes, we will notify you by email. The "last updated" date at the top of this notice will always show the most recent version.

12. Contact us

If you have any questions about this Privacy Notice or how we handle your personal data, please contact us at: Sophie's 69 Greenlands Avenue, Ramsey, Isle of Man, IM8 2PQ Email: [email protected] You can also contact the Isle of Man Information Commissioner: Isle of Man Information Commissioner P.O. Box 69, Douglas, Isle of Man, IM99 1EQ Telephone: +44 1624 693260 Email: [email protected] Website: https://inforights.im