Privacy Policy
Last updated: September 2026
This Privacy Policy explains how Rishita Beauty Lab ("we", "us", "the business") collects, uses and protects information you share with us through this website or when you contact us on WhatsApp, phone or email to enquire about our makeup services. It is written to meet India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and, for visitors in the European Union/EEA, the General Data Protection Regulation ("GDPR").
Who We Are
Rishita Beauty Lab is a sole-proprietor bridal & party makeup business based in Agra, Uttar Pradesh, India, and is the "data fiduciary" (DPDP Act) / "data controller" (GDPR) for the personal data described in this policy. You can reach us at rishitabeautylab@gmail.com or +91 97621 69775.
Grievance Officer
As required under Section 13 of the DPDP Act, our Grievance Officer for any privacy question, complaint or data-rights request is:
- Name: Rishita (Proprietor, Rishita Beauty Lab)
- Email: rishitabeautylab@gmail.com
- Phone/WhatsApp: +91 97621 69775
We aim to acknowledge grievances within 48 hours and resolve them within 30 days.
Information We Collect
- Contact details you share directly with us — name, phone/WhatsApp number, email, event date and location — when you reach out to enquire or book a service, including via the enquiry form and the WhatsApp pop-up on this site.
-
Technical/cookie identifiers set by the Meta Pixel (
_fbp,_fbc) and your IP address/browser user-agent — only after you accept the cookie banner. See Cookies, Meta Pixel & Advertising below.
Our Legal Basis for Processing
- Consent — for the Meta Pixel/advertising cookies (only set after you accept the cookie banner), and for storing the phone number/details you submit through the enquiry form or WhatsApp pop-up (only after you tick the checkbox stating we may contact you on that number about your enquiry). We keep a record of the exact wording you agreed to and when, alongside your enquiry, so we can show what was agreed to if you ever ask.
- Contract / steps taken at your request — for using your enquiry/booking details to respond, quote and deliver a confirmed booking.
- Legal obligation — for retaining booking/payment records as required by Indian accounting and tax law.
How We Use It
- To respond to your enquiry and discuss booking details.
- To coordinate event-day logistics and payments related to a confirmed booking.
- With your consent, to measure and improve our Facebook/Instagram advertising (see Cookies section below).
- We do not sell or rent your personal information to third parties.
WhatsApp Communication
When you message us via WhatsApp, standard WhatsApp/Meta privacy terms also apply to that conversation, in addition to this policy.
Photos & Portfolio
With client consent, photos/videos from real bookings may be featured in our portfolio, website and social media. If you'd prefer your images not be used publicly, let us know and we will honor that request.
Third-Party Services & International Transfers
This website uses a small number of third-party services to function, each governed by its own privacy policy: WhatsApp/Meta (for chat enquiries and, with your consent, advertising measurement), Google Sheets/Apps Script (to log enquiry phone numbers so we can call you back), Google Fonts (for typography), and, where linked, Instagram and YouTube for portfolio content. Meta and Google are based in, and process data in, the United States — outside India and the EU/EEA. Both operate under their own standard contractual/data-processing terms for this purpose. We don't otherwise control how these third parties handle data and encourage you to review their policies separately.
Cookies, Meta Pixel & Advertising
This website only sets advertising/analytics cookies after you accept the cookie banner shown on your first visit — nothing below runs before that, and you can change your mind at any time via the "Cookie Settings" link in the footer. Once accepted, we use the Meta Pixel and Meta's Conversions API to understand how visitors use the site and to measure the performance of our Facebook/Instagram advertising. This involves Meta placing cookies in your browser and — when you click a WhatsApp enquiry button — our server sharing limited technical information about that visit (such as your IP address, browser type, the page you were on, and Meta's own browser/click identifiers) directly with Meta. We do not send Meta anything you type into a message; this only happens when you click to enquire. Meta may combine this with other information it holds about you, as described in Meta's own Privacy Policy. You can also control ad personalization directly through your Meta account settings and your browser's cookie/privacy controls.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_fbp | Meta Pixel | Identifies your browser to Meta for ad measurement/attribution | 90 days |
_fbc | Meta Pixel | Records that you arrived via a Facebook/Instagram ad click | 90 days |
Google Fonts is loaded from Google's servers on every page (regardless of the cookie banner), which means Google receives your IP address to serve the font files, as described in Google's Privacy Policy. No Google account cookie is set by this.
Data Retention
- Enquiries that don't lead to a booking: phone number and details are kept up to 12 months from your last contact, then deleted, unless you ask us to delete them sooner.
- Confirmed bookings: your details are kept for the duration of the booking plus up to 3 years afterwards, to handle any follow-up and to meet Indian accounting/tax record-keeping requirements.
- Meta Pixel cookies: expire automatically per Meta's own retention (typically 90 days) — see the table above.
- You may request earlier deletion at any time once there is no active or upcoming booking, by emailing us — see Your Rights below.
Your Rights
Subject to any record we're legally required to keep for a confirmed booking, you can ask us, at any time, to:
- Confirm what personal data we hold about you, and access a copy of it.
- Correct inaccurate or incomplete data.
- Erase your data.
- Restrict or object to how we process your data.
- Receive your data in a portable format.
- Withdraw any consent you previously gave — as easily as you gave it, including via the cookie/consent controls described above — without affecting anything we did before you withdrew it.
To exercise any of these, contact our Grievance Officer above. If you're not satisfied with our response, you may complain to India's Data Protection Board (once operational, per the DPDP Act) or, if you're in the EU/EEA, to your local data protection supervisory authority.
Data Breach Notification
In the event of a personal data breach that's likely to affect you, we will notify affected users and the relevant authority (India's Data Protection Board, and, for EU/EEA users, the applicable supervisory authority) as required by law.
Children's Privacy
Our services and this website are intended for adults booking or enquiring about makeup services and are not directed at children.
Changes to This Policy
We may update this policy from time to time; the version published on this page reflects our current practice.
Contact Us
Questions about this policy? Reach us at rishitabeautylab@gmail.com.