Booking Policy
GDPR Policy
At Roote Beauty, we are committed to protecting the privacy and personal data of our clients. This policy outlines how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR).
​
Data We Collect
We collect and process the following personal data:
-
Name and contact information
-
Appointment history and preferences
-
Health information relevant to eyelash extensions
-
Payment details
​
How We Use Your Data
We use your personal data to:
-
Provide and improve our eyelash extension services
-
Communicate about appointments and aftercare
-
Process payments
-
Send marketing communications (with your explicit consent)
​
Legal Basis for Processing
We process your data based on:
-
Contractual necessity (to provide our services)
-
Legitimate interests (to improve our services)
-
Your explicit consent (for marketing and sensitive health data)
​
Data Storage and Security
We store your data securely and retain it only for as long as necessary. We implement appropriate technical and organisational measures to protect your data from unauthorised access or disclosure.
​
Your Rights
Under GDPR, you have the right to:
-
Access your personal data
-
Rectify inaccurate data
-
Erase your data ("right to be forgotten")
-
Restrict or object to processing
-
Data portability
-
Withdraw consent for marketing communications
​
Data Breaches
In the event of a data breach that risks your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals promptly.
​
Subject Access Requests
You are entitled to request access to all information we hold about you. We will provide this free of charge within 30 days of your request.
​
Consent
We obtain explicit consent from all clients to store and use their data. This consent is recorded and stored as proof.​
This policy was last updated on Tuesday, February 04, 2025.
​
For any questions or to exercise your rights regarding your personal data, please contact us.