Privacy Policy

Glitter and Shine is a boutique nail, hair and wellness studio based at Unit 8/9 The Meadway Precinct, Tilehurst, Reading, RG30 4AA, United Kingdom.

For any data-protection questions, please email us at rafael@ripponstudio.co.uk or call 07480 662247.

• Enquiries: name, email, phone number, and the service you are interested in.
• Accounts: name, email, phone number, and order/subscription history.
• Orders: items purchased, fulfilment choice, total, discount codes used, and payment status.
• Subscriptions: product, frequency, billing status, and pause/resume history.
• Reviews: rating, feedback, and optional contact details.
• Analytics: anonymous page-view data and session identifiers to help us improve the site.

• To fulfil a contract — processing orders, subscriptions, and appointments.
• With your consent — marketing emails and optional review follow-ups.
• Legitimate interest — anonymous analytics and fraud prevention.
• Legal obligation — keeping business and tax records for the required period.

We keep order, subscription, and enquiry records for 7 years to meet UK accounting and tax requirements. Review data and analytics are kept for a shorter period unless you ask us to delete them earlier.

We do not sell your personal data. We only share it with the services we need to run the business:

• Stripe — processes card payments and subscription billing securely.
• Lovable Cloud — hosts the website and the backend database that stores your account and order data.

These providers act as data processors and are contractually bound to protect your information.

We use a small number of cookies and similar technologies:

• Essential — cart, session, and authentication cookies required for the site to work.
• Analytics — anonymous page-view tracking to help us understand how visitors use the site. This is only enabled if you accept it via the cookie banner.

You can change your choice at any time by clicking “Cookie settings” in the footer.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict certain processing.
• Withdraw consent at any time.

To exercise any of these rights, please contact rafael@ripponstudio.co.uk.

We keep access to customer data limited, use strong authentication for staff, and rely on our payment and hosting providers’ security measures. No system is completely risk-free, so if you have a security concern, please let us know immediately.

We may update this Privacy Policy as the site or the law changes. The latest version will always be posted here, so please check back from time to time.