Privacy & cookies

Last updated 9 November 2026

Who we are

This website is run by Bisma Khan trading as Beauty By Bisma, who decides how your information is used (the “controller”). Contact: 07380 969983 or beautybybisma03@gmail.com.

What this website collects

This website has no forms and no accounts. Simply visiting it does not give us your name or contact details. Our host, Cloudflare, processes basic technical information (such as your IP address) to deliver and protect the site (lawful basis: our legitimate interest in running a secure website).

When you contact or book

• WhatsApp, phone or Instagram/TikTok messages — we use your name, number and messages to answer you and manage your booking (lawful basis: taking steps to enter a contract with you). These services are run by Meta and TikTok under their own privacy policies.
• Makeup consent form (Google Forms) — your name, booking date, any allergies, sensitivities or skin conditions, and your agreement to our policies. Allergy and skin information is health information; we only collect it with your explicit consent, to keep you safe during your appointment. The form is stored in our Google account (Google is our processor). You can withdraw this consent at any time, but we may then be unable to do your makeup safely.
• Deposits and payments — if you pay by bank transfer, we see your name and the payment reference on our bank statement and keep a record of what you paid (lawful basis: contract, and our legal duty to keep business records).

If you book for someone under 18, please complete the consent form with them as their parent or guardian.

We never sell your information or use it for marketing without asking you first. We don't make any automated decisions about you.

Who else handles it

Only the services we use to run the business: Google (consent forms and email), Meta (WhatsApp and Instagram), TikTok and Cloudflare (website hosting). Some of these may store information outside the UK; where they do, they use the legal safeguards UK data protection law requires (such as UK-approved contract terms).

How long we keep it

Booking messages are kept for up to 12 months after your appointment. Consent forms (including any allergy or skin information) are kept for 3 years after your last appointment, in case of any reaction or claim, then deleted. Payment records are kept for 6 years because the law requires it.

Cookies

This website does not set any cookies. Cloudflare may count visits without cookies.

Links to WhatsApp, Instagram, TikTok and Google Forms take you to those services, which use their own cookies under their own policies.

Your rights

You can ask to see, correct or delete your information, object to how it's used, or withdraw consent at any time — just message us. We'll reply within one month. If you're unhappy, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).