Privacy Notice

Last updated: 26 September 2026

1. Who We Are

This Privacy Notice explains how Colour Analysis Luxembourg, operated by Melanie Reuter ("we", "us", or "our"), collects, uses, stores and protects your personal data when you visit our website, book an appointment, purchase a service or otherwise interact with us.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Luxembourg data protection laws.

Data Controller

Colour Analysis Luxembourg
Melanie Reuter
Website: www.colouranalysis.lu
Email: colouranalysisluxembourg@gmail.com

2. What Personal Data We Collect

When you book an appointment, we may collect:

  • Full name

  • Email address

  • Telephone number

  • Preferred session language (English, German, French or Luxembourgish)

  • How you heard about Colour Analysis Luxembourg

  • Names of additional attendees (for group bookings)

  • Whether you consent to being photographed or filmed for social media

  • Any photographs you voluntarily upload before your appointment (for example, childhood photos or photos showing your natural hair colour to assist with your colour analysis)

  • Any additional information you choose to provide when making your booking or contacting us

Information collected during your appointment

To provide your colour analysis and any follow-up services, we may also record:

  • Your colour season and colour analysis results

  • Notes relating to your consultation

  • Personal colour recommendations

  • Information you voluntarily share that is relevant to the service you have booked

We only collect information that is necessary to provide our services.

3. Photographs, Videos and Social Media

During your appointment, we may take photographs or videos to document your colour analysis results or, where you have agreed, to create content for our website and social media channels.

Before your appointment, you may indicate whether you would like to be featured on our social media by selecting:

  • Yes

  • No

  • Maybe

Selecting "Yes" means you consent to us taking photographs and/or videos and using them on our website, Instagram, TikTok and other marketing materials.

Selecting "Maybe" means we will discuss this with you during your appointment before recording or publishing any content. No marketing content will be published without your explicit agreement.

Selecting "No" means no photographs or videos will be taken for marketing purposes.

You may withdraw your consent at any time by contacting us. We will remove photographs or videos from our own social media channels, website and future marketing materials within a reasonable timeframe. Please note that we cannot control content that has already been shared, downloaded or reposted by third parties before your request.

Photographs that are taken solely to assist with your colour analysis are treated separately from marketing images and are only used for providing the requested service unless you have given additional consent.

4. Newsletter

If you subscribe to the Colour Analysis Luxembourg newsletter through our website or a link shared on our social media channels, we collect your email address solely for the purpose of sending you occasional emails about new appointments, special offers, upcoming events and services.

We send newsletters no more than once per month.

Newsletter subscriptions are managed through Brevo, which processes your email address on our behalf for the purpose of managing the mailing list and sending emails.

You can unsubscribe at any time by using the unsubscribe link included in each newsletter or by contacting us directly. After unsubscribing, your email address will no longer be used to send you newsletters.

Newsletter subscriptions are based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time.

5. How We Use Your Information

We process your personal data in order to:

  • manage appointment bookings

  • provide colour analysis and follow-up services

  • communicate with you before and after appointments

  • process payments

  • issue invoices

  • comply with legal and tax obligations

  • improve our services

  • respond to enquiries

  • send newsletters and other marketing communications where you have given your consent

  • manage and maintain our newsletter subscriber list

6. Legal Basis for Processing

Depending on the situation, we process your data based on one or more of the following legal grounds:

  • performance of a contract (Article 6(1)(b) GDPR), for example to manage and provide services you have booked

  • compliance with legal obligations (Article 6(1)(c) GDPR), for example accounting and tax requirements

  • our legitimate interests (Article 6(1)(f) GDPR), where applicable and where those interests do not override your rights and freedoms

  • your consent (Article 6(1)(a) GDPR), for example for newsletter subscriptions, marketing communications and photographs or videos used for marketing purposes

7. Third-Party Service Providers

To operate our business, we use trusted third-party providers that may process personal data on our behalf, including:

  • Squarespace (website hosting)

  • Acuity Scheduling (appointment booking)

  • Stripe (payment processing)

  • Google Workspace (email)

  • Brevo (newsletter management and email marketing)

  • WhatsApp, Meta (Instagram, Facebook), TikTok and YouTube (if you contact us through these platforms)

These providers only process personal data as necessary to provide their services and have their own privacy policies.

8. Payment Information

Online payments (such as deposits) are securely processed by Stripe.

We do not store your credit or debit card details.

Payment information is processed directly by Stripe in accordance with its own Privacy Policy.

9. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this Privacy Notice.

Appointment records and invoices may be retained for the period required under Luxembourg tax and accounting legislation.

Newsletter subscriber information, including your email address and records relating to your newsletter subscription and consent, is retained for as long as you remain subscribed to the newsletter or until your consent is withdrawn.

After you unsubscribe, we may retain limited information where necessary to keep a record of your withdrawal of consent and to prevent you from being unintentionally re-added to the newsletter mailing list.

When personal data is no longer required, it is securely deleted.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction.

Although we strive to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

11. Cookies

Our website uses cookies to ensure the website functions correctly and to improve your browsing experience.

Depending on the technologies used on our website, cookies may include:

  • essential cookies required for website functionality

  • performance or analytics cookies

  • payment-related cookies used by Stripe during checkout

Where legally required, you will be asked for your consent before non-essential cookies are placed on your device.

12. Your Rights

Under the GDPR, you have the right to:

  • access your personal data

  • request correction of inaccurate data

  • request deletion of your data

  • restrict processing

  • object to processing

  • withdraw consent at any time

  • request a copy of your data (data portability)

  • lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD)

13. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards required by the GDPR, such as an adequacy decision or appropriate contractual safeguards, where applicable.

The location and processing arrangements of individual service providers may vary and are governed by their applicable privacy policies and data processing agreements.

14. Changes to this Privacy Notice

We may update this Privacy Notice from time to time.

The latest version will always be published on our website together with the date of the latest revision.

15. Contact

If you have any questions regarding this Privacy Notice or wish to exercise your GDPR rights, please contact:

Melanie Reuter
Colour Analysis Luxembourg
Email: colouranalysisluxembourg@gmail.com

If you believe your personal data has been processed unlawfully, you also have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD) in Luxembourg.