top of page

Terms & Conditions

By booking with us you acknowledge that you understand and agree to our terms and conditions. Roote Beauty reserve the right to cancel or change your appointment if necessary. 

Booking Policy

GDPR Policy 

At Roote Beauty, we are committed to protecting the privacy and personal data of our clients. This policy outlines how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR).

​

Data We Collect

We collect and process the following personal data:

  • Name and contact information

  • Appointment history and preferences

  • Health information relevant to eyelash extensions

  • Payment details

​

How We Use Your Data

We use your personal data to:

  • Provide and improve our eyelash extension services

  • Communicate about appointments and aftercare

  • Process payments

  • Send marketing communications (with your explicit consent)

​

Legal Basis for Processing

We process your data based on:

  • Contractual necessity (to provide our services)

  • Legitimate interests (to improve our services)

  • Your explicit consent (for marketing and sensitive health data)

​

Data Storage and Security

We store your data securely and retain it only for as long as necessary. We implement appropriate technical and organisational measures to protect your data from unauthorised access or disclosure.

​

Your Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Erase your data ("right to be forgotten")

  • Restrict or object to processing

  • Data portability

  • Withdraw consent for marketing communications

​

Data Breaches

In the event of a data breach that risks your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals promptly.

​

Subject Access Requests

You are entitled to request access to all information we hold about you. We will provide this free of charge within 30 days of your request.

​

Consent

We obtain explicit consent from all clients to store and use their data. This consent is recorded and stored as proof.​

 

This policy was last updated on Tuesday, February 04, 2025.

​

For any questions or to exercise your rights regarding your personal data, please contact us.

bottom of page