Who I am & who this policy covers
Loulou’s Beauty is a private beauty studio operated by Louise Victoria Melvin, based on Knowle Road, Rowley Regis, West Midlands, United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, I am the sole data controller for the personal information you share with me. This policy explains what I collect, why I collect it, how I protect it, and the rights you have — and it also sets out the ways this policy protects me, my studio, and my professional work.
If you need to contact me about anything in this policy, email [email protected] or message me on Instagram at @loulous_beauty_.
What information I collect
I only collect what I genuinely need to run the studio safely and to deliver the treatment you have booked. Depending on how you interact with me, this may include:
- Booking & appointment information — your name, contact number, email address, the treatment selected and the appointment date, collected when you book via my booking system (Solo / booksolo.co).
- Consultation & medical history — for treatments such as Hyperrealism Brows (SPMU), lash lifts, lash tints, brow lamination and brow waxing & tinting, I take a short consultation record and the medical history you disclose so I can decide whether the treatment is safe for you.
- Patch test records — including date, product used and outcome, where a patch test is required.
- Consent forms — signed by you (or, for under-16s, by a parent or guardian) before certain treatments take place.
- Payment & booking fee information — processed securely through my booking provider. I do not store your card details myself.
- Treatment photographs — where you have given consent, I may take before, during and after photographs or short video clips of your treatment for your personal record, my clinical records, my portfolio, social media and training purposes.
- Correspondence — messages you send me via email, Instagram, Facebook or text in relation to your booking.
- Website analytics — basic, anonymous information about how visitors use this website, so I can improve it.
Why I use your information
- To confirm, manage and deliver the treatment you have booked.
- To keep you informed about your bookings (confirmations, reminders, rescheduling).
- To carry out safe consultations and to decide whether a treatment is suitable for you.
- To meet my professional and insurance obligations, including keeping accurate clinical records.
- To process payments and booking fees and to keep my financial records.
- To share your before/after photographs on my portfolio, social media or in training — only where you have given explicit consent.
- To comply with my legal, tax, licensing and insurance obligations.
My legal basis for using your data
Under UK GDPR I must have a lawful basis for processing your personal information. The main bases I rely on are:
- Contract — to deliver the treatment you have booked and the services connected with it.
- Consent — for example where you agree to me using your before/after photos on my portfolio or social media.
- Legitimate interests — for example keeping appropriate clinical, insurance and business records that help me run the studio safely and lawfully.
- Legal obligation — for example keeping financial records as required by HMRC, or retaining consultation records to meet industry and insurance guidance.
- Vital interests — in the rare event that information needs to be shared to protect your health or the health of another person.
How long I keep your information
I only keep your personal information for as long as I genuinely need it:
- Consultation, treatment and patch test records — retained for a minimum of 7 years in line with UK insurance and industry best-practice guidance.
- Financial records — retained for 6 years in line with HMRC requirements.
- Booking records — retained for as long as you remain an active client and for a reasonable period afterwards.
- Marketing photographs — retained while actively used in my portfolio and removed from my public channels on request.
Who I share your information with
I do not sell your personal information. I share it only with the small number of trusted providers and authorities that help me run the studio lawfully, and only to the extent necessary:
- My booking system provider (Solo / booksolo.co) to handle appointments and booking fees.
- My email and messaging providers for confirmations and reminders.
- My accountant, insurer, regulators or legal advisors where required for legal, tax, insurance or professional reasons.
- Law enforcement or other authorities where I am legally required or permitted to do so.
How I keep your information secure
Your information is kept in secure, password-protected systems. Paper records, where used, are stored securely. I limit access to your information to what is needed to run the studio and meet my legal obligations, and I take reasonable steps to protect it against loss, misuse and unauthorised access.
Photographs, before/after images & portfolio use
Photographs and short video clips are an important part of my work as a Hyperrealism Brows (SPMU) and beauty artist. They form part of my clinical record, my portfolio and my marketing.
- I will only use identifiable images of you (including anything that shows your face) on my portfolio, social media or in training materials where you have given explicit, informed consent, typically recorded on your consultation or consent form.
- Close-up images of the treatment area (for example brows, lashes or nails) that do not identify you may be used in my portfolio and social media as part of my legitimate interest in showcasing my work, unless you have asked me not to.
- You can withdraw consent for future use of your identifiable images at any time by emailing me. Once consent is withdrawn, I will stop using the image in new marketing and will remove it from my own channels within a reasonable time. Where an image has already been shared or reposted by third parties, I cannot always guarantee its removal from those external places.
- All photographs and video taken by me, whether used in marketing or not, remain my copyright and intellectual property. Consent to appear in an image does not transfer ownership of the image to you.
Reviews, tagging & mentions on social media
If you leave a review, tag Loulou’s Beauty on social media, or mention me in a public post, I may reshare, quote or engage with that content as part of running my studio. I will always do so respectfully. If you later want a review or mention removed from my own channels, please contact me and I will take reasonable steps to do so.
Your obligations to me — accurate information & honest disclosure
Some of the treatments I offer, particularly Hyperrealism Brows, involve working with the skin and require me to make informed decisions about your safety. To protect you and to protect me as the artist carrying out the treatment, you agree that:
- The information you give me during consultation, including your medical history, medications, allergies, previous treatments and lifestyle factors, is accurate and complete to the best of your knowledge.
- You will tell me about any changes to your health, medications or pregnancy status between your consultation and your appointment.
- You will complete any required patch test and follow the pre-treatment guidance I have provided.
If you knowingly withhold or give false information that would have affected my decision to carry out a treatment, I may not be able to accept responsibility for the outcome, and my cancellation, refund and aftercare policies will apply in full.
My right to refuse or stop treatment
I reserve the right to refuse, pause or stop a treatment at any time where I believe it is in your interest or mine to do so. This includes, but is not limited to, situations where:
- A treatment is no longer safe or suitable based on information disclosed at consultation or on the day.
- A patch test has not been completed where one is required.
- A client is under the influence of alcohol or other substances.
- A client behaves in a way that is abusive, threatening, discriminatory or otherwise unacceptable towards me or anyone else present.
In these situations, booking fees may be retained in line with my Terms & Conditions.
Dispute resolution & concerns
If you are unhappy with any aspect of your treatment or your experience, I ask that you contact me directly first so I have the opportunity to understand the issue and, where appropriate, put it right. Most concerns can be resolved quickly through a private conversation. Posting about a concern publicly before contacting me limits my ability to help you and may be unfair to my work and reputation.
Intellectual property
All content on this website and my social media channels, including photographs, videos, written content, brow designs, treatment names, logos and branding, is owned by Loulou’s Beauty or used with permission. You are welcome to share my public social media posts through the normal sharing functions on those platforms, but my content may not be copied, reproduced, edited or used commercially without my written permission.
Your rights under UK GDPR
You have the following rights over your personal data:
- The right to be informed about how I use it (this policy).
- The right to access a copy of the information I hold about you.
- The right to have inaccurate information corrected.
- The right to have your data erased, where that is possible and where I am not legally required to retain it.
- The right to restrict or object to how I use your data.
- The right to withdraw consent for anything you previously consented to, such as the use of your photographs.
- The right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
To exercise any of these rights, email [email protected] and I will respond within one month.
Children
Some treatments can be booked for clients under the age of 16, with an adult present throughout the appointment and a signed consent form from a parent or guardian, as set out in my Terms & Conditions. Any personal data about a minor is handled with extra care and is only used for the purposes of delivering that treatment safely.
Cookies & website analytics
This website uses only the essential cookies needed for it to function. Where basic analytics are in use, they collect anonymous information about how visitors arrive at and navigate the site. None of this data identifies you personally.
Changes to this policy
I may update this privacy policy from time to time to reflect changes in my practices or in the law. The latest version will always be published on this page.
— Loulou’s Beauty