Privacy & Cookie Policy

Cover Beauty Ltd is the data controller for information you provide when you use coverbeauty.co.uk, our mobile apps and our studio dashboard. You can contact our Data Protection Officer at privacy@coverbeauty.co.uk.

• Account details: name, email, phone, encrypted password.
• Booking data: services, appointment times, notes you share with a studio.
• Payment metadata (never full card numbers, handled by our PCI-DSS certified processor).
• Device and usage data: IP, browser, pages viewed, only where you have consented.

• Contract, to deliver bookings and payments you request.
• Legitimate interests, to keep the service secure and prevent fraud.
• Consent, for marketing emails, non-essential cookies and analytics.
• Legal obligation, tax, accounting and safeguarding requirements.

We set strictly-necessary cookies to keep you signed in and to secure your session. Analytics and marketing cookies only run after you click "Accept all" on the consent banner. You can change your mind at any time by clearing your browser storage for this site.

Under the UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Data portability in a machine-readable format.
• Withdraw consent at any time.
• Lodge a complaint with the ICO (ico.org.uk).

Email privacy@coverbeauty.co.uk and we will respond within one calendar month.

Booking and financial records are kept for 7 years to meet HMRC obligations. Marketing preferences are retained until you unsubscribe. Inactive accounts are deleted after 3 years.

Data is processed in the UK and EEA. Where a sub-processor is outside these regions, we rely on UK IDTA / EU Standard Contractual Clauses.

All traffic is encrypted with TLS 1.3. Passwords are hashed with bcrypt. Payment card data is handled by a PCI-DSS Level 1 processor and never touches our servers.