Privacy Policy · Beauté Corner Ltd

Plain English summary: Beauté Corner Ltd uses NgoziCRM to manage bookings and client records. We collect only what we need to deliver your service. Your data is stored securely with our software provider, mainly in the United States. You can request access, correction, or deletion at any time.

APPLICABLE REGULATIONS

NDPA 2023 (Nigeria) POPIA (South Africa) DPA 2019 (Kenya) DPA 2017 (Mauritius) General Data Protection Principles

1. Who Is the Data Controller?

Beauté Corner Ltd is the data controller for the personal data you provide when booking appointments or using our services. We use NgoziCRM, operated by A-One Global Resourcing Ltd (AOGRL), as our software platform.

2. What Data We Collect

Identity data: Full name, date of birth
Contact data: Phone number, WhatsApp number, email address
Appointment data: Services booked, dates, times, session notes
Health & skin data: Intake form responses, consultation notes (where applicable)
Financial data: Payment confirmations (we do not store card numbers)
Technical data: IP address at time of booking (for consent records)

3. Why We Process Your Data

Contractual necessity: To book, confirm, and manage your appointments
Legitimate interest: Appointment reminders via WhatsApp
Consent: Marketing communications (you may opt out at any time)
Legal obligation: Retaining records as required by applicable law

4. How Long We Keep Your Data

We retain your personal data for 24 months from your last appointment, or as required by law. After this period, records are automatically anonymised. You may request earlier deletion at any time (see Your Rights below).

5. Who We Share Your Data With

NgoziCRM / AOGRL — our booking software provider (data processor), which hosts the service with Railway (United States), keeps encrypted backups with GitHub (United States) and sends emails through Resend (United States)
WhatsApp (Meta) — appointment reminder delivery
Payment processors — Stripe, PayPal or Paystack (for deposit transactions only)
We do not sell your data to any third party.

6. Data Security

All data is encrypted in transit (TLS 1.2 or higher), and nightly backups are encrypted with AES-256. Passwords are stored only as salted hashes. Access is restricted to staff who need it.

Where your data is stored: mainly in the United States, with the providers listed above. Data is transferred only to providers that commit to protecting it; for the UK and EU, Standard Contractual Clauses (SCCs) or equivalent safeguards apply. Details: NgoziCRM privacy policy.

7. Your Rights

Under applicable data protection law you have the following rights:

👁️

Right of Access

Request a copy of all personal data we hold on you.

✏️

Right to Rectification

Ask us to correct inaccurate or incomplete data.

🗑️

Right to Erasure

Ask us to delete your data (subject to legal obligations).

📦

Data Portability

Receive your data in a structured, machine-readable format.

🚫

Right to Restrict

Request that we pause processing while a complaint is resolved.

📣

Right to Object

Object to processing based on legitimate interests or for marketing.

To exercise any of these rights, use our secure request form or contact us directly.

Submit a Data Request →

8. Cookies

Our booking page uses a single session cookie to remember your progress. We do not use third-party tracking or advertising cookies on booking pages.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via WhatsApp or email. Continued use of our services after updates constitutes acceptance.

10. Contact

For privacy queries:

Email: j.ahmad@beautycorner.uk

Or use our Data Subject Request Form.