Writing for people who run service businesses
Product updates, practical guides and what we are learning from salons, garages, clinics and trades across the UK.
5 articles
GDPR for a two-person business
You do not need a data protection officer or a 40 page policy. You do need to know what you hold, why and how to delete it when asked.
Compliance,The first 24 hours of a data breach
A lost phone, a misdirected email or a stolen laptop starts a 72 hour clock. Knowing the order of the first few steps is the difference between an incident and a crisis.
Compliance,Is your booking page usable by everyone?
Roughly one in five people in the UK has a disability. If your booking page is hard for them to use, that is both a legal question and a fifth of your market.
Compliance,Client data on your team's personal phones
Half the client contact in a small business happens on somebody's own phone. That is convenient right up to the day they leave, lose it or fall out with you.
Compliance,Special category data in a small clinic or studio
Aesthetics, tattooing, physio, podiatry and massage all collect health information. That is a different category of data with a higher bar and most small practices have never been told.
Compliance,