2. PRIVACY POLICY

Effective date: 1 October 2025

2.1. Introduction

This Privacy Policy describes how Allure Makeup Studio collects, uses, stores, shares, and protects personal information of clients, website users, and business contacts. By interacting with us, you consent to the practices described in this policy.

2.2. Data Controller

Allure Makeup Studio
In front of Gurudwara, Dehradun, Uttarakhand
Email: [email@alluremakeupstudio.com]

2.3. What Information We Collect

a) Personal information you provide

• Name, phone number, email, postal address, date of birth.
• Service preferences, medical/allergy history, patch test results, photo release consent.
• Payment details for transactions (card tokens via payment gateways — we do not store full card numbers).
• Business details for corporate clients (company name, GSTIN, billing address).

b) Usage & Technical data

• IP address, browser type, device, pages visited, referral source, cookies and analytics data.

c) Photographs & Media

• Before/after photos and videos taken with consent for service records or marketing.

d) Other data

• Communications (emails, WhatsApp chats), incident reports, complaint history.

2.4. How We Use Your Data

We use personal data to:

• Provide, manage, and improve services and bookings.
• Communicate appointment confirmations, reminders, and follow-ups.
• Process payments and issue invoices.
• Maintain service records, patch tests, and legal consents.
• Market services (email/SMS/WhatsApp) with consent; send promotions and membership updates.
• Improve website performance & analytics.

2.5. Legal Basis (where applicable)

• Consent: for marketing & photo use.
• Contract performance: to fulfil booking obligations.
• Legal obligations: accounting, tax, safety compliance.
• Legitimate interest: to operate, improve services, and manage client experience.

2.6. Sharing & Disclosure

We may share personal data with:

• Payment processors (Razorpay/Stripe) for secure transactions.
• Third-party providers: SMS/WhatsApp APIs, email (SendGrid), analytics (Google Analytics), cloud storage (S3), and authorised freelancers for events.
• Law enforcement/regulators when required by law.
• Marketing partners/cross-promotions, only with your consent.

All third parties are contractually obliged to follow security and confidentiality standards.

2.7. Cookies & Tracking

We use cookies and similar technologies to:

• Enable website functionality.
• Remember preferences.
• Analyse traffic.
• Support ad targeting.

You may manage cookies via browser settings or our cookie banner.

2.8. Data Retention

• Booking records, invoices, tax documents: minimum 7 years (per law).
• Patch tests & medical consents: at least 2 years, unless required longer.
• Marketing preferences: until consent is withdrawn.
• Media (photos/videos): retained until consent is withdrawn or business use ends.

2.9. Data Security

We apply reasonable technical & organisational measures including encryption, access controls, and secure backups. While no system is 100% secure, we continually monitor and update protections.

2.10. Your Rights

You have the right to:

• Access or correct your personal data.
• Request deletion (subject to legal obligations).
• Withdraw consent to marketing or media use.
• Object to processing or request data portability (where applicable).

Requests should be emailed to [email@alluremakeupstudio.com]. We will respond within 30 days.

2.11. Children

We do not knowingly collect data from children under 16 without parental consent. If identified, such data will be deleted immediately.

2.12. International Transfers

If your data is stored or processed outside India, we ensure appropriate safeguards are in place.

2.13. Changes to Policy

We may revise this policy; updates will be posted on our website with the new effective date.

2.14. Contact / Data Protection Officer (DPO)

For privacy concerns, contact:
 Email: [email@alluremakeupstudio.com]
Abdul — +91 91490 71110