Privacy Policy

Beautasy is a small alterations atelier and shop in Southampton. This page explains, in plain words, what we know about you, why we need it, who helps us look after it, how long we keep it, and what you can ask us to do with it.

Who we are

Beautasy is the trading name of Krestina Safaryan, a sole trader based in Southampton, United Kingdom. We decide how your information is used, which makes us the "controller" under UK data protection law.

For anything about your data, email hello@beautasy.co.uk. Kristina reads every message herself.

What we collect, and why

When you book a fitting or ask for a collection

• Your name, email address, phone number if you give it, the service you're after, the time you chose and any notes you add.
• If you ask for Collect & return: your postcode and when you're usually in. The website keeps only the first half of your postcode (for example SO17), next to your booking. The full postcode goes only to Kristina, in her email about your request. When you're usually in is stored encrypted, with your notes. You send us your street address in a message; the website never asks for it.
• Whatever you tell us in messages about the work: measurements, photos of the garment, your event date.
• When you pay, Kristina writes down in our accounts the amount, how you paid and, if she adds them, your name and what the payment was for.

Why: to arrange and do the work you asked for (that's our contract with you), and to keep the accounts the law requires.

When you buy from the shop

• Your name, email address, delivery address, what you bought and what you paid.
• If you order a piece made to measure: the measurements you type in, so Kristina can make it. They go with your order to Stripe and show on your receipt. In our database they're stored encrypted.
• If you buy a gift card: the name and email of the person it's for and your message, so we can deliver it.
• Card details go straight to Stripe, our payment provider. We never see or store them.
• If Stripe's payment page asks whether you'd like to hear from us and you tick yes, then leave without paying, we email you once with a link back to your order. For that we keep your email address (encrypted) and a list of what was in your bag. We do this only because you said yes; without the tick, we send nothing and keep nothing.

Why: to take payment, post your order and keep our accounts (contract and legal obligation).

If you make an account

Clerk runs our sign-in. It holds your name, email address and login details, and we link your orders to your account so you can see them in one place. If you choose "Continue with Google", Google shares your name, email address and profile picture with Clerk to sign you in.

Why: you asked for an account (contract). You can delete it at any time yourself, under "Manage account" in the account menu, or email us and we'll do it. Your past orders stay in our records, because the law says we must keep them.

Reviews

When you leave a review on our website, we keep the name you want shown, your rating, your words and any photos you add. Kristina reads every review before it can go on the site. Before we store your photos, we remove hidden details from them, such as where they were taken. We also show some reviews that people have posted about us on Google, Nextdoor and Etsy, with the name shown there (and, for Nextdoor, the neighbourhood). If one of them is yours and you'd like it off our site, tell us and we'll take it down. After an order or a visit we may email you once to ask for a review; you're free to ignore it.

Why: reviews help other people choose us. Asking you once is in our legitimate interest, and you can always ask us to take your review down.

Newsletter and "back in stock" alerts

• Newsletter: your email address, only if you sign up. We also make you a one-time welcome discount code at Stripe, our payment provider, which keeps your email address with the code. You can leave at any time with the unsubscribe link in our newsletter emails, or by replying to any of them.
• Back in stock: your email address and the item and size you're waiting for. We email you when it's back, and then we're done.

Why: you asked us to (consent).

Beautasy Friends and partner salons

• Customers who order or come for a fitting get their own Friends link, and anyone can ask for one on our Friends page. For it we keep your first name, your email address and your link. The link carries your first name, so friends who open it see who sent them.
• If you use someone's Friends link, we note your first name with your order or booking. When your order is paid or your fitting is done, we let them know by email, using your first name only, so they get their reward. We never give them your contact details.
• If a salon or shop we work with sent you to us, we note which one. When your fitting is done or your order is paid, we let them know you came, using your first name only, so they get their credit. Once a month we send them a short summary: how many clients came and the share they've earned. We never give partners your contact details.

Why: to run the programmes you or the partner joined (legitimate interest and contract).

When you message us

If you write to us on WhatsApp, Telegram, Instagram, Facebook or by email, we keep the conversation so we can answer you and do the work (contract, or our legitimate interest in replying to you), for as long as explained under How long we keep it. Those apps are run by Meta, Telegram and other companies under their own privacy policies.

Cookies and similar technology

Always on, because the website needs them:

• Your bag and wishlist, saved in your own browser.
• Your cookie choice, so we don't ask you again.
• Sign-in cookies from Clerk. Every visitor gets a small one that only says whether you're signed in; more are added when you sign in.
• A friend's link: if you arrive through a Beautasy Friends or partner salon link, or type a friend's code in your bag, a cookie remembers it for 30 days so the discount works when you pay or book.

Only if you click "Accept all":

• Google Analytics: shows us which pages people visit.
• Google Ads: shows us whether our adverts bring people to the site.
• Meta Pixel: does the same for our Instagram and Facebook adverts. It doesn't load at all until you agree.

If you click "Essential only", none of these set cookies on your device, and the Meta Pixel never loads. Google's tag still loads, in a restricted mode: without cookies, it tells Google that a page was viewed, with basic details such as your type of browser, so Google can estimate visits and advert results. It only starts using cookies once you click "Accept all".

Without cookies: Vercel, who host our website, count visits without cookies and without telling us who you are. We also read your country from your internet address to pre-select the right delivery option. We don't store it. Both are in our legitimate interest in running the shop well.

Who helps us

We don't sell your information. We share it only with the companies below, who work for us under contract, and only as much as each one needs:

• Vercel: hosts the website.
• Sanity: our database for orders, bookings, reviews, sign-ups and Friends links. Full names, email addresses, phone numbers, addresses, measurements, notes and gift messages in it are encrypted with a key only our own server holds. So that Kristina can tell records apart, some details are not encrypted: your first name, the start of your email address (like an…@gmail.com), what you booked or bought and when, what you paid, and the first half of your postcode.
• Stripe: takes payments and makes our discount codes. If you pay through a service such as Apple Pay or Google Pay, that company handles the payment too, under its own privacy policy.
• Clerk: runs accounts and sign-in.
• Resend: sends our emails.
• Cloudflare: passes emails sent to hello@beautasy.co.uk on to Kristina's inbox. It also keeps a private nightly copy of our database in the EU, so nothing is lost if something goes wrong. Each copy is deleted after 30 days, and contact details in it stay encrypted, as they are in Sanity.
• Our email provider: holds Kristina's inbox, with your messages and the booking and order details our website sends her.
• Google: Analytics and Ads. Their tag sets cookies only after you click "Accept all"; before that it sends only the cookie-free signals described under Cookies.
• Meta: the Pixel, only with your consent.
• Royal Mail and other carriers: your name and address, to deliver your parcel.

We'll also share information if the law requires it, for example with HMRC.

Outside the UK

Some of these companies store information in the United States or the European Union. When information leaves the UK, it is protected by the UK's adequacy rules (including the UK–US "data bridge") or by the ICO's approved contract clauses. Ask us and we'll tell you which applies to each company and send you a copy.

How long we keep it

• Orders, payments and our bookkeeping: six years after the end of the tax year they fall in, because HMRC requires it.
• Your account: until you delete it, or ask us to. Your past orders stay for the time above.
• Bookings, collection details and messages: two years after your last visit, unless we still need them for the accounts.
• Newsletter: until you leave. After that we keep your address, encrypted and marked "unsubscribed", only so we never email you again.
• Back in stock: twelve months at most. We email you once, when it's back.
• Reviews: for as long as they're on the site. Ask and we'll take yours down.
• Friends links: while the programme runs, and up to two years after your link was last used.
• Google Analytics: no longer than fourteen months.

Your rights

You can ask us to:

• show you what we hold about you and give you a copy;
• correct anything that's wrong;
• delete it, unless the law makes us keep it (accounts, for example);
• stop using it where we rely on our legitimate interests (reviews, Friends and partner records, and asking you for a review). This is your right to object, and we'll stop unless we have a strong reason the law accepts;
• use it only in limited ways while something is being checked or put right;
• send it to you or to someone else in a common format;
• stop sending you marketing, at any time, no questions asked.

Where we rely on your consent, you can take it back at any time. For cookies, use Cookie settings at the bottom of any page.

Email hello@beautasy.co.uk. It's free, and we'll answer within one month.

Complaints

If you're unhappy with how we've handled your information, please tell us first at hello@beautasy.co.uk. We'll confirm we've received your complaint within 30 days and do our best to put it right. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Children

Our shop and bookings are for adults. Children's items and school uniform alterations are booked and bought by a parent or carer.

Do you have to give us your details?

Only what we need to do what you've asked: your name and email address, for a parcel your delivery address, and for Collect & return your postcode. Without them we can't take your order or booking. Everything else, like your phone number, an account, the newsletter or a review, is up to you.

Decisions made by computer

We don't make decisions about you by computer alone. Stripe checks every payment automatically for fraud and may decline one. If that happens, you can try another way to pay or get in touch with us.

Changes

When this policy changes, we'll update the date at the top. If a change affects you directly, we'll email you.