PRIVACY POLICY
Last updated: 03/10/25
Because your privacy matters to us.
This Privacy Policy explains how MAKEUP BY GEORGIA SULLIVAN (“we”, “our”, “us”) collects, uses, and protects your personal information when you visit our website, fill out our booking form, or contact us. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.
1. Who We Are
MAKEUP BY GEORGIA SULLIVAN (“we,” “our,” or “us”)
📍 Based in 109 brecon road, merthyr tydfil, cf47 8ng
📧 makeupbygeorgiasull@hotmail.com
We are the data controller responsible for your personal data.
2. Information We Collect
We may collect and process the following information:
Identity Data — name, contact details (email, phone number, address).
Booking/Enquiry Data — details you provide when making a booking or enquiry.
Technical Data — IP address, browser type, device type, and browsing behaviour.
Transaction Data — payment details (processed securely via third-party payment providers).
Marketing & Communications Data — your preferences for receiving updates from us.
3. How We Collect Your Information
We collect data when:
You contact us via our booking or enquiry form.
You communicate with us via email or social media.
You make a booking or payment.
You browse our website (cookies and analytics).
4. How We Use Your Information
We will only use your personal data when the law allows us to. Main purposes include:
To provide and deliver our makeup services.
To respond to your enquiries.
To confirm and manage your bookings.
To send you updates or offers (if you’ve opted in).
To improve our website and client experience.
To comply with legal or financial obligations.
Lawful bases for processing include:
Contract — when processing is necessary to perform our contract with you.
Consent — when you’ve agreed to receive marketing communications.
Legal Obligation — where we need to comply with the law.
Legitimate Interests — for running our business in a way that does not override your rights.
5. Marketing Communications
You can opt in to receive marketing updates, and you may unsubscribe at any time.
We will never sell your personal data to third parties.
6. Sharing Your Information
We only share your information with:
Service providers who help us run our business (e.g., website hosting, email platforms, payment processors).
Professional advisers (e.g., accountants) if required.
Regulators, law enforcement, or legal requests where necessary.
7. International Transfers
If we transfer your data outside the UK/EEA, we ensure it is protected with appropriate safeguards, such as approved standard contractual clauses.
8. Data Retention
We will only keep your personal data for as long as necessary to fulfil the purposes it was collected for, including legal or accounting requirements.
9. Your Rights (UK GDPR)
You have the right to:
Access your personal data.
Correct inaccurate or incomplete data.
Request deletion of your data (“right to be forgotten”).
Restrict or object to processing.
Withdraw consent at any time.
Request transfer of your data to another provider (“data portability”).
You can exercise these rights by emailing [Insert Professional Email].
10. Complaints
If you have concerns about how we handle your data, please contact us so we can resolve it.
If you’re not satisfied, you have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO) — www.ico.org.uk
11. Cookies
We use cookies to improve your browsing experience and analyse website usage.
You can disable cookies in your browser settings, but some site features may not function properly. More info: www.aboutcookies.org
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.