Privacy Policy (Datenschutzerklärung)

1. Data Controller

The data controller responsible for this website is:

2. Data We Collect

When you book an appointment through our website, we collect the following information:

• Full name, email address, and phone number
• Address (only for travel appointments)
• Skin type, allergies, and makeup preferences (intake form)
• Appointment date, time, and service selection

3. Purpose of Data Processing

We process your personal data for the following purposes:

• To process and manage your appointment booking
• To send confirmation emails and appointment reminders
• To prepare for your makeup session (intake form data)
• To contact you regarding your appointment if needed

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

4. Data Storage & Retention

Your data is stored securely in our database hosted by Supabase (cloud infrastructure in the EU). We retain your data only for as long as necessary to fulfill the purposes described above, or as required by law.

5. Third-Party Services

We use the following third-party services:

• Supabase — Database hosting (EU servers)
• Resend — Email delivery service
• Vercel — Website hosting

6. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability (export your data)
• Right to restrict processing
• Right to object to processing

To exercise any of these rights, please contact us at hello@sanaaglam.com.

7. Cookies

This website uses only technically necessary cookies required for the website to function. No tracking or analytics cookies are used. No consent banner is required for technically necessary cookies.