Privacy Policy

Glorious Beauty is the controller for the personal data described in this privacy policy.

If you have questions about this policy or about how your data is handled, contact info@gloriousbeauty.com or Vicus 1, Veldhoven.

We may process the following categories of personal data:

• Identification and contact data, such as your name, email address, telephone number, and any information you include in a message or booking request.
• Appointment and service data, such as the requested service, appointment date and time, booking status, and communication about changes, cancellations, or follow-up.
• Technical data, such as basic device or browser information that is necessary for the site to function and to secure the booking flow.
• Communication data, such as emails, phone calls, messages sent through connected social platforms, and correspondence about an appointment or request.

We process personal data only where there is a lawful basis under the GDPR. The main purposes are:

• To respond to contact requests and manage appointments, based on performance of a contract or steps taken before entering into a contract.
• To provide and administer bookings, rescheduling, reminders, and related customer service, based on performance of a contract.
• To comply with legal obligations, including accounting, tax, and record-keeping obligations where applicable.
• To protect our legitimate interests, including maintaining the security, integrity, and availability of the website and booking process.

We generally receive data directly from you when you use the site, contact us, or make a booking.

We may also receive data from third-party tools that support the booking process or communication workflow, to the extent needed to operate those services.

We do not sell personal data.

• We may share data with service providers that process data on our behalf, such as booking, hosting, email, or administrative providers.
• We may share data if this is necessary to comply with a legal obligation, to enforce our rights, or to protect the security of our services.

We keep personal data no longer than necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

Where we cannot define a fixed retention period in advance, we use a case-by-case assessment based on the nature of the relationship, the type of data, and any legal retention requirements.

The site may use functional or technically necessary cookies and may link to or load external services such as maps, social platforms, or booking tools.

Those third-party services operate under their own privacy policies and terms. We are not responsible for their processing practices.

Subject to the conditions and limitations in the GDPR, you may have the right to access, rectify, erase, restrict, object to, or port your personal data.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out before withdrawal.

If you believe your data is inaccurate or being handled improperly, contact us first so we can review the request.

If you remain dissatisfied after contacting us, you have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority.

We may update this privacy policy from time to time. The version published on this page is the current version.