Last updated 29 October 2026
Privacy policy
This page explains what personal data I collect when you book or get in touch, why I need it, who else handles it and how long I keep it. In short: I only use your details to arrange and carry out your appointments, I never sell them, and this website sets no cookies.
Who I am
Lili Hair & Makeup is run by Lili Shevchenko, a self-employed hairdresser and makeup artist. I am the data controller for the personal data described here.
Lili Hair & Makeup
Curbridge Way, Whiteley, SO30 2BB, United Kingdom
Email: lili.hair.makeup@gmail.com
What I collect
When you send a booking request through the form on this website: your name, phone number, email address (if you give it), the service you're interested in, your preferred date and time, and anything you write in the message box.
When you contact me another way, such as an Instagram message, WhatsApp, email or phone: your name, your contact details and what you send me, including any inspiration photos.
When you're my client: your appointment history, the services and prices, and practical notes such as colour formulas. If you tell me about allergies, a skin or scalp condition, or other health information that matters for your treatment, and when I carry out a skin allergy (patch) test before colour, I record that too. Health information is a special category of data, and I only keep it with your explicit consent and only for your safety during treatment.
When you visit this website: like any website, the hosting server automatically logs technical details such as your IP address, browser type and the pages requested. This helps keep the site secure and working. The site loads its fonts from Google Fonts, so your browser also connects to Google's servers, which see your IP address.
Why I use it, and the legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Replying to your enquiry, arranging and confirming appointments, and carrying out your treatment | Taking steps at your request before a contract, and performing that contract (Article 6(1)(b)) |
| Recording allergies, patch test results and other health information relevant to your treatment | Your explicit consent (Article 9(2)(a)), which you can withdraw at any time |
| Keeping business and tax records | Legal obligation (Article 6(1)(c)) |
| Running a secure website and handling complaints or claims | My legitimate interests in running my business safely (Article 6(1)(f)) |
I don't send marketing messages. If I ever want to, I'll only do it with your separate, opt-in consent.
Who else handles your data
I use a few trusted services to run my business. They only process your data to provide their service to me:
- Web3Forms delivers booking form submissions to my inbox.
- Google (Gmail) stores my emails, and Google Fonts serves the website's fonts.
- GoDaddy hosts this website and keeps its server logs.
- Meta (Instagram and WhatsApp) carries any messages you send me through those apps, under Meta's own privacy policy.
I may also share information when the law requires it, for example with HMRC. I never sell your personal data or share it for anyone else's marketing.
Some of these providers store or process data outside the UK, including in the United States. Where they do, the transfer is protected by safeguards recognised under UK data protection law, such as the UK–US data bridge or the UK International Data Transfer Addendum.
How long I keep it
- Booking requests that don't lead to an appointment: deleted within 6 months.
- Client records, including patch test results and treatment notes: kept for 2 years after your last appointment, then deleted.
- Payment and accounting records: kept for as long as tax law requires, normally 6 years.
- Website server logs: kept by the hosting provider for a limited period under its own retention rules.
Cookies
This website doesn't set any cookies and doesn't use analytics or advertising trackers, so there is no cookie banner. If that ever changes, I'll update this page and ask for your consent where the law requires it.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data I hold about you;
- have inaccurate data corrected;
- have your data deleted, unless I have to keep it by law;
- restrict or object to how I use it;
- receive data you gave me in a portable format;
- withdraw your consent at any time, where I rely on consent. This doesn't affect anything done before you withdrew it.
To use any of these rights, email lili.hair.makeup@gmail.com. I'll reply within one month. It's free in most cases.
Keeping your data safe
Your data is kept on password-protected accounts and devices, and this website uses an encrypted (HTTPS) connection. Only I have access to client records.
Complaints
If you're unhappy with how I've handled your data, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this policy
I may update this policy from time to time. The date at the top shows when it last changed.