Privacy Policy

At Beauty'n'Form, we take the privacy of your personal information very seriously. This privacy policy describes how we collect, use, share, and protect your data when you use our website for online appointment booking and eye beauty training. By using our site, you agree to the practices described in this policy.

We collect the following personal information when you use our site:

• First and last name: for identification and personalisation of our services.
• Email address: for communication about appointments, confirmations, reminders and, possibly, future communications.
• Phone number: when you provide it, to contact you about an appointment or a training application.
• Booking and application data: the service or course chosen, the date and time slot, and the information you enter in our forms.

Payments are handled directly by our provider Stripe: we do not store your card details.

We collect your personal information in different ways:

• Online forms: During registration, appointment booking, or information requests.
• Cookies and similar technologies: To improve your experience on our site. See section 4 for more details.

We use two types of functional cookies to optimise your user experience:

• Preferred language cookie: This cookie remembers the language you have selected (fr-FR, en-US, ru-RU) and persists for 1 year.
• Site theme cookie: This cookie remembers the theme you have chosen (system, dark, light) and is stored in localStorage with no expiry.

These cookies do not collect directly identifiable personal data but help personalise and improve your user experience.

Audience measurement (Google Analytics 4): only with your consent, we use Google Analytics 4 to measure the site's audience (page views, booking and application journeys) in order to improve our services. No measurement cookie is set until you click "Accept" in the banner, and we never send directly identifying data (name, email, phone) to Google. Google Analytics cookies last at most 13 months. You can withdraw your consent at any time via the "Manage cookies" link in the footer.

The information collected is used for:

• Appointment and application management: confirmation, reminders and cancellation of appointments, follow-up of training applications and reminders for files awaiting payment.
• Client communication: Responses to enquiries, important notifications regarding services.
• Future marketing: We may use your email to send you special offers and news about our services. You can choose not to receive these communications.

We do not sell your data and do not share it for any commercial purpose. To run the service, some data is processed by technical sub-processors acting on our behalf and contractually bound to protect it: Stripe (payments), Google (website hosting, email delivery and, with your consent, audience measurement via Google Analytics) and MongoDB Atlas (database hosting). We only disclose your information to other third parties where required by law or to protect our rights.

Users' personal information is retained until they request account deletion. Users can access this option in their account settings.

• Language cookie: Retained for 1 year.
• Theme cookie: Stored in localStorage with no expiry.
• Audience-measurement consent choice: Stored in localStorage (with its date) until you change it.
• Audience-measurement data (Google Analytics 4): Anonymised statistics retained for at most 14 months.

Access: You have the right to access the personal information we hold about you.

Modification: You can modify your first and last name in your account settings. The email address cannot be changed for security reasons.

Deletion: You can request the deletion of your account and personal data in your account settings. Once your request has been processed, your data will be deleted from our systems.

We implement technical and organisational security measures to protect your personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction. Data is stored on a MongoDB Atlas cluster in Belgium and is only accessible via a secure token-based connection provided by NextAuth.

Your data is hosted in the European Union. The only transfers outside the European Union concern our web-analytics tool (Google Analytics), enabled only with your consent: they are governed by the EU-US Data Privacy Framework, to which Google adheres.

Beauty'n'Form reserves the right to modify this privacy policy at any time. We will inform you of any significant changes by publishing the new privacy policy on our website. We encourage you to check this page regularly to stay informed of any changes.

If you have any questions or concerns about this privacy policy, or if you wish to exercise your rights as a user, please contact:

• Kristina Mouyen
• President of Beauty'n'Form
• Email: kristina@beautynform.com
• Address: 875 B chemin de Pourradel, 31620 Fronton