A private service,
clearly explained.

Who is responsible

The Beauty Address is a personal beauty concierge in London, run by Alessandra Marba. The company that will act as data controller is not incorporated yet. The details below are placeholders and will be replaced when a company is registered. Until then, write to Alessandra about this notice or about your information.

Contact for privacy requests: alessandra@thebeautyaddress.co.uk

What we collect

If you create an account or use the client area, we collect:

• Your email address, so we can send a secure sign-in link and know which account is yours.
• Your beauty profile, if you choose to save one. That can include your name, the products you use, your skin, your hair, your foundation brand and shade, what you would like help with, ingredients and preferences to avoid, a product budget, and your London area, home or hotel.
• The requests you send: what you need, where it should be delivered or arranged, a preferred date, and your budget.
• Messages you exchange with Alessandra about a request.
• Photographs you choose to upload, for example a product label or a shade reference. These are stored privately for that request. They are not published, and they are not used to assess or diagnose your skin.

If you email alessandra@thebeautyaddress.co.uk, we receive your email address and whatever you choose to include: your routine, your plans, a hotel or address, or a photograph.

The public pages do not use analytics cookies and do not ask you to create an account. Signing in stores a necessary session in your browser so you can stay signed in. It is not used to follow you around the web.

Why we use it

• To reply to you and provide the concierge service you asked for: a personal edit, a restock, or a facial, hair or makeup appointment at your home or hotel.
• To give you secure access to your account, and to show you only your own profile, requests and messages.
• To prepare an itemised proposal and keep a record of what you approved before anything is bought or booked.
• To look after the service, including a correction, a question or a complaint.

Under UK GDPR, we rely on:

• Steps towards a contract, and the service itself (Article 6(1)(b)), when you ask Alessandra to arrange something for you.
• Legitimate interests (Article 6(1)(f)), in answering an enquiry and keeping a clear record of what was agreed. You can object to this, as described below.
• A legal obligation (Article 6(1)(c)), where a limited record has to be kept, for example for tax.

We do not sell your information, and we do not use your profile, photographs or messages for advertising.

How long it is kept

• Your account and beauty profile are kept while your account is open. You can edit or delete the saved profile yourself. Deleting it removes that profile from your account. It does not automatically remove the copy already attached to a request you have sent, because Alessandra needs that copy to carry out the request.
• Requests, messages and photographs are kept so the request can be completed and so there is a record of what was approved. Our practice is to delete them within 24 months of the request being completed or cancelled, unless you ask sooner or the law requires a limited record to be kept for longer.
• Emails you send to Alessandra are kept in her mailbox while she is handling the enquiry, and then for the same 24 months after the matter is closed, unless a legal obligation requires longer.

Deletion is carried out by us. It is not yet automatic. Write to us if you would like your information removed sooner.

Who else handles it

These organisations process information for us, and only for the reasons in this notice:

• Supabase provides account sign-in, the database that stores your profile, requests and messages, and the private file store for photographs. This project is hosted in London (AWS eu-west-2). Sign-in emails are sent through Supabase.
• Vercel hosts this website and delivers the pages you request, including technical logs needed to run and protect the site.
• Google Workspace receives and stores email sent to alessandra@thebeautyaddress.co.uk.

We do not pass your details to a brand, a hotel or a treatment provider unless you have agreed a particular order or appointment and a name, address or time is needed to fulfil it. Alessandra will tell you before that happens.

Your account information is stored in the United Kingdom. Vercel and Google may process technical or email data in the UK and, where their services require it, in other countries. Where information leaves the UK, it is protected under those providers’ terms and the UK GDPR rules on international transfers.

Your rights

You can ask us to:

• tell you what personal information we hold about you;
• correct it;
• delete it;
• limit how we use it;
• object to use based on legitimate interests, including any objection to direct marketing — we do not send marketing;
• receive a portable copy, where that right applies to information you gave us.

Email alessandra@thebeautyaddress.co.uk. We will respond within one month. We may need to confirm it is you before we release or delete anything.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for personal information:

Changes to this notice

We will update this page when the company is incorporated, or if the way we handle information changes. The date at the top of the notice will change with it.