Privacy Policy

Last updated: January 2026

This Privacy Policy explains how Lumière Beauty Lab ("we", "us", "our") collects, processes, stores and protects your personal data when you visit our website at lumirebeautylab.com, contact us, or use our beauty and cosmetology services. We act as the data controller within the meaning of Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the Dutch GDPR Implementation Act (Uitvoeringswet AVG).

1. Data Controller

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us using the details above.

2. What Personal Data We Collect

2.1 Data you provide directly

• Contact and enquiry data: your name, email address, phone number and message content when you submit our contact or booking form.
• Appointment and client data: contact details, treatment history, consultation notes, skin analysis results and consent records needed to provide safe treatments.
• Health-related data: information relevant to your treatment safety (e.g. allergies, skin conditions, medication use, pregnancy status), provided voluntarily by you. We process this only with your explicit consent.
• Billing data: name, address and payment details required to issue invoices and process payments.

2.2 Data collected automatically

• Technical data: IP address, browser type and version, device type, operating system and pages visited, collected through cookies and similar technologies.
• Cookie preference data: your cookie consent choices, stored in a technical cookie so we can respect your settings.

3. Legal Bases and Purposes of Processing

We process your personal data only when we have a lawful basis under the GDPR:

• Contract performance (Art. 6(1)(b) GDPR): to schedule and perform treatments, respond to enquiries, process payments and deliver the services you request.
• Legal obligations (Art. 6(1)(c) GDPR): to comply with tax, accounting and record-keeping obligations applicable to beauty and cosmetology businesses in the Netherlands.
• Explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR): to process health-related data disclosed during consultations, and to use optional analytics and marketing cookies. You may withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f) GDPR): to secure and improve our website, prevent fraud and maintain essential functionality. Essential cookies rely on this basis.

4. Cookies

We use the following categories of cookies:

• Essential cookies: required for the website to function, including a cookie that stores your consent preferences. These do not require consent.
• Analytics cookies: help us understand how visitors use the website so we can improve it. Placed only with your consent.
• Marketing cookies: used to measure and improve the relevance of our communications. Placed only with your consent.

You can manage your preferences at any time via the cookie banner shown on your first visit, or by clearing cookies in your browser settings. For full details, please see our Cookies Policy.

5. Data Sharing and Recipients

We do not sell your personal data. We share it only with:

• Service providers (processors): hosting, email and scheduling providers who process data on our instructions under data processing agreements in accordance with Art. 28 GDPR.
• Professional advisers: accountants and legal advisers where necessary.
• Public authorities: where we are legally required to disclose data.

Where service providers are located outside the European Economic Area, transfers are made only on the basis of an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Data Retention

• Contact form enquiries: retained for up to 12 months after our last response.
• Client and treatment records: retained for the statutory retention periods applicable to beauty and health-related services (generally up to 7 years for financial and treatment records, as required by Dutch law).
• Cookie consent records: retained for up to 12 months.
• Analytics data: retained no longer than 26 months.

After the applicable retention period, data is deleted or anonymised.

7. Data Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, restricted access to client records, secure storage of physical consultation files, and staff confidentiality obligations.

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15): obtain confirmation and a copy of the personal data we hold about you.
• Right to rectification (Art. 16): correct inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion of your data, subject to legal retention obligations.
• Right to restriction (Art. 18): request that we restrict processing in certain circumstances.
• Right to data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent (Art. 7): withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at [email protected] or write to Lumière Beauty Lab, Heuvelstraat 87, 5038 NL Tilburg, Netherlands. We will respond within one month of receiving your request. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), if you believe our processing of your data is unlawful.

9. Children's Privacy

Our services are not directed at children under 16. We process the data of minors only with the consent of a parent or legal guardian, in accordance with Dutch law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version is always published on this page with the date of the last update. Significant changes will be communicated where appropriate.

11. Contact

For any privacy-related questions, requests or complaints, please contact Lumière Beauty Lab at [email protected] or by post at Heuvelstraat 87, 5038 NL Tilburg, Netherlands.