Privacy Policy

FindStylist is a UK-based technology platform that connects clients with verified Afro and textured hair specialists across the United Kingdom. We operate as a marketplace — we are not a hair service provider.

Company name: FindStylist Ltd (in formation)
Country of operation: United Kingdom
Contact email: hello@findstylist.co.uk

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

When you register or apply through FindStylist, we may collect the following personal data:

• Full name — To identify you on the platform
• Email address — To communicate with you and send platform updates
• City and postcode — To match you with nearby stylists
• Hair type — 4A, 4B, or 4C — to improve matching accuracy
• Hair interests / specialisms — Styles you want or services you offer
• User type — Whether you registered as a client or a stylist
• Phone number — Optional — only if you choose to provide it

We do not collect payment information, government ID, or any special category data beyond hair type (which is provided voluntarily to improve the service you receive).

We collect personal data for the following purposes:

• Matching clients with stylists — Your hair type, location, and interests allow us to surface the most relevant stylists for you.
• Platform communications — We use your email to send confirmations, platform updates, and information about your account.
• Improving the platform — Aggregate, anonymised data helps us understand which hair types and services are most in demand.
• Beta programme management — During our beta phase, we use your data to contact you when the platform is ready.

Our lawful basis for processing is legitimate interests (providing the matching service you signed up for) and, where applicable, consent (e.g. marketing communications).

Your data is stored securely using the following infrastructure:

• Database: Supabase — Hosted in the EU West 2 (London) region. All data is encrypted at rest using AES-256 and in transit via TLS 1.2+.
• Access controls — We use Row Level Security (RLS) on all database tables. The public-facing app has INSERT-only access — it cannot read, update, or delete existing records.
• Hosting: Vercel — Our web application is hosted on Vercel's edge network. No personal data is stored on Vercel infrastructure beyond standard access logs.
• Retention — We retain your data for as long as your interest in the platform is active. You may request deletion at any time by emailing hello@findstylist.co.uk.

As a UK data subject, you have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you.
• Right to rectification — Ask us to correct inaccurate or incomplete data.
• Right to erasure — Request that we delete your personal data (the 'right to be forgotten').
• Right to data portability — Receive your data in a structured, machine-readable format.
• Right to restriction — Ask us to limit how we use your data while a dispute is resolved.
• Right to object — Object to our processing of your data based on legitimate interests.

To exercise any of these rights, email us at hello@findstylist.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk.

FindStylist uses only functional cookies — the minimum required to operate the platform. We do not use tracking, advertising, or analytics cookies.

• Functional cookies — Set by Vercel's edge infrastructure to manage routing and security. These are essential to serve the website correctly.
• No third-party tracking — We do not use Google Analytics, Meta Pixel, or any advertising tracking cookies.
• No persistent profiling — We do not build behavioural profiles from cookie data.

We use the following third-party services to operate FindStylist. Each processes data only as needed to deliver the service:

• Supabase — Our database provider. Stores all user-submitted data. Hosted in London (eu-west-2). Supabase is GDPR compliant and processes data under a Data Processing Agreement. Privacy policy →
• Vercel — Our hosting and deployment platform. Serves the FindStylist website globally. May process standard server access logs (IP, user agent, timestamp). Vercel is GDPR compliant. Privacy policy →
• UptimeRobot — Used to ping our API every 5 minutes to keep the Supabase project active. This service only accesses our /api/ping endpoint — no personal data is transmitted. Privacy policy →

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us:

This Privacy Policy was last updated on 14 March 2026. We may update it from time to time — any material changes will be communicated via the email address you registered with.