Privacy Policy

Last updated: 10 March 2026

1. Who We Are

MADE by Kali is a freelance makeup artistry business operated by Kali, based in Wrexham, LL12, North Wales. For the purposes of UK data protection law, Kali is the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your data, please contact us at: madebykali26@gmail.com

2. What Data We Collect

We may collect and process the following personal data:

  • Contact information: your name, email address, phone number, and location/address
  • Booking details: preferred date, service type, number of people, and any special requirements you share with us
  • Communication records: messages you send via the enquiry form, email, Instagram, or TikTok
  • Photos: images taken during or after a makeup session (only with your consent)
  • Referral information: how you heard about us (e.g. Instagram, word of mouth, Google)
  • Technical data: if you visit our website, your browser type, IP address, and pages visited may be collected automatically

3. How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your enquiry and communicate with you about bookings
  • To provide the makeup services you have requested
  • To send booking confirmations, reminders, and follow-up messages
  • To share your photos on our portfolio or social media (only with your explicit consent)
  • To improve our services and website
  • To comply with legal obligations

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

  • Contract: processing is necessary to fulfil a booking or respond to your enquiry
  • Consent: where you have given clear consent, such as agreeing to photos being shared on social media
  • Legitimate interests: to improve our services, maintain records, and market our business in a way you would reasonably expect
  • Legal obligation: where we are required to keep certain records (e.g. for tax purposes)

5. How We Store and Protect Your Data

Your data is stored securely using password-protected devices and accounts. We take reasonable steps to protect your personal data from unauthorised access, loss, or misuse. We do not store payment card details.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Typically:

  • Enquiry data: up to 12 months after your last communication
  • Booking records: up to 6 years for tax and accounting purposes
  • Photos: until you withdraw consent for their use

6. Sharing Your Data

We do not sell your personal data to any third party. We may share your data with:

  • Service providers: such as email hosting, website hosting, or accounting software providers who process data on our behalf
  • Social media platforms: if you have consented to photos being shared on Instagram, TikTok, or similar
  • Legal authorities: if required by law or to protect our legal rights

Where third-party providers are based outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

7. Cookies and Website Analytics

Our website may use essential cookies to ensure it functions properly. We do not currently use advertising or tracking cookies. If this changes, we will update this policy and provide you with the ability to manage your cookie preferences.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you
  • Right to rectification: ask us to correct inaccurate or incomplete data
  • Right to erasure: ask us to delete your personal data (where there is no compelling reason for us to keep it)
  • Right to restrict processing: ask us to limit how we use your data
  • Right to data portability: request your data in a structured, commonly used format
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at madebykali26@gmail.com. We will respond within one month.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Helpline: 0303 123 1113

We would appreciate the chance to address your concerns before you contact the ICO, so please reach out to us first.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically.