Last updated: April 2026. This notice describes how Makeup by Sahar (the “we” / “us” of this site) uses personal data when you use makeupbysahar.co.uk and when you make an enquiry or booking. It is written for clients in the United Kingdom. If you are unsure about anything here, you can also read the ICO’s guidance for the public or ask us using the contact details at the end.
Who we are
We provide professional makeup services on an independent basis. For data protection law, the controller of your personal data is the business “Makeup by Sahar” operating in the UK. Contact: info@makeupbysahar.co.uk.
What we may collect
When you use our enquiry form, email, or phone/WhatsApp, we may process: your name, email address, phone number, event date and location, and any other details you choose to provide (e.g. skin or allergy information relevant to the service). When you use the website, the hosting environment or analytics tools (if enabled) may process technical data such as IP address and device type, as set out in our Cookie policy.
Why we use your data and lawful bases
We use this information to: respond to enquiries, prepare quotes, deliver agreed makeup services, take payment where applicable, and keep our records. The lawful bases are typically contract (steps before a contract or the contract itself) and, where you have clearly opted in, consent (e.g. certain marketing or non-essential cookies). We may also rely on legitimate interests (e.g. website security) where balanced against your rights.
Sharing and international transfers
We do not sell your personal data. We may use trusted service providers (e.g. email or hosting) who process data on our instructions. If any provider stores data outside the UK/EEA, we ensure an appropriate safeguard (e.g. UK Addendum to standard contractual clauses) where required by law.
How long we keep data
We keep contact and booking records for as long as needed to provide the service, meet accounting or legal requirements, and handle any disputes — typically a limited number of years after your event unless a longer period is required by law.
Your rights
Under UK GDPR you may have the right to access, correct, delete, or restrict processing of your data, to object in certain cases, and to complain to the Information Commissioner’s Office (ICO). To exercise a right, contact us at the email above.