Privacy policy

Last updated: 1 October 2026

At Pink Beauty, we only collect the data we need to welcome you at the salon, process your orders and manage your account. This page explains what data, why, how long we keep it and how to exercise your rights. It applies to the pinkbeauty.lu website, the Pink Beauty apps and the salon.

Who is responsible for your data?

Pink Beauty SARL, 6, rue des Martyrs, L-3739 Rumelange, Luxembourg. RCS B227836, VAT LU30607201.
For any question about your data: contact@pinkbeauty.lu or +352 27 56 95 43.

What data and why?

Your customer account: first name, last name, email, phone, password (encrypted). To identify you on the website and in the apps. Legal basis: contract.
Your salon appointments: chosen treatments, date, beautician, message left for the salon, visit history, loyalty points, discounts, missed appointments and amounts still owed. To organise appointments, send you confirmations and reminders, and manage the waiting list and loyalty programme. Legal basis: contract and legitimate interest.
Health information relevant to a treatment (allergies, contraindications, pregnancy, etc.): only if you share it with us, and only to perform the treatment safely. Please do not put it in the booking message: talk to your beautician. Legal basis: your explicit consent, which you can withdraw at any time.
Your orders: billing and delivery addresses, products ordered, invoices, VAT number for professionals. To deliver and invoice. Legal basis: contract and legal obligation (accounting).
Payment: card details are entered and stored only by our payment provider (Stripe, via WooPayments); we never have access to them. A card may be requested to guarantee some appointments (see our terms and conditions). Legal basis: contract.
Messages and notifications: confirmation, reminder or waiting-list emails and text messages; app notifications if you allow them. Legal basis: contract; you can turn notifications off at any time.
Product reviews: name, email and review content. Only the name you enter and your review are published. Legal basis: consent.
Security: IP address and technical logs, to protect the website and your account against attacks and spam. Legal basis: legitimate interest.

If you were already a client before our online booking opened, your file (contact details, history, loyalty points) was transferred from our previous booking software to ensure continuity of service.

We make no automated decisions about you and do no advertising profiling.

Mobile apps

The apps use the same account as the website. In addition to the data above, they store your login session and basket on your phone and, if you accept notifications, a notification identifier sent to our server. They contain no advertising, analytics or tracking. You can delete your account from the app (Account → Delete my account).

Cookies

The website uses no advertising or analytics cookies. It only sets the cookies it needs to work: chosen language, basket, login to your account, website and payment security. These cookies do not require your consent.

Who can see your data?

Only the Pink Beauty team, according to their role, and our technical providers, acting on our instructions:

OVH (website hosting, in France);
Stripe and Automattic (online payment);
smsmode (text messages, in France);
Expo, Apple and Google (app notifications);
Wordfence (website firewall);
GLS (parcel delivery);
our accountant.

We never sell or rent your data. Some providers (Stripe, Automattic, Expo, Wordfence, Google) may process data outside the European Union; these transfers are covered by the safeguards provided by the GDPR (EU–US Data Privacy Framework or standard contractual clauses).

How long?

Account, appointment history and loyalty points: as long as your account is active, then 3 years after your last visit or order; they are then deleted or anonymised.
Invoices and accounting records: 10 years (legal obligation in Luxembourg).
Card saved with Stripe: until you remove it or delete your account.
Reviews: as long as they are published, or until you ask us to remove them.
Security logs: 12 months at most.

Your rights

You may at any time ask to access, correct, delete or port your data, object to or restrict its processing, and withdraw your consent. Write to us at contact@pinkbeauty.lu; we reply within one month. You can also update your details yourself in "My account" and delete your account from the app. Invoices are kept for the legal period.

If you believe your rights are not respected, you can lodge a complaint with the Luxembourg data protection authority (Commission nationale pour la protection des données, CNPD), 15, boulevard du Jazz, L-4370 Belvaux – cnpd.public.lu.

Changes

We may update this policy; the date at the top of the page shows the latest version.

This is a translation; the French version prevails.