Privacy Policy

Last updated: 8 April 2026

1. Who we are

Data controller: Louise Parkinson, trading as Spray Tan by Lou, 21 Bridge Street, Coleraine, County Londonderry, BT52 1DR, Northern Ireland.

Contact: via Instagram at @spray_tan_by_lou or through the booking system on the home page.

2. What we collect and why

We collect personal data in two places:

• Booking system (Cal.com): when you book an appointment, Cal.com collects your name, email address, phone number (if provided), and the date/time of your appointment. This is used to confirm, remind, and manage your booking.
• In-person at your appointment: we may note skin-type and tan-preference details so we can give you a better, more consistent service on repeat visits.

The lawful basis for processing this information is Article 6(1)(b) of the UK GDPR (performance of a contract — i.e. providing the treatment you booked) and, for aftercare information, Article 6(1)(f) (legitimate interests).

3. How long we keep it

Booking records are retained for up to 24 months after your last appointment, after which they are deleted. Any skin-sensitivity or consultation notes are kept for the same period. We do not retain marketing data.

4. Who we share it with

We do not sell or share your data with third parties for marketing. Your data is processed by the following service providers:

• Cal.com — our booking platform. Cal.com hosts and processes your booking data.
• Google (Fonts) — loaded only after you accept cookies on the home page. Used to render typography.
• AWS (Amazon Web Services) — hosts this website (CloudFront and S3).

5. International transfers

Some of our service providers (Cal.com and Google) are based in or transfer data to the United States. Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework, as appropriate. These safeguards are designed to give your data a similar level of protection to that which it would have in the UK. See Cal.com's privacy policy at cal.com/privacy for their handling details.

6. Cookies

This site uses Google Fonts and embeds a Cal.com booking widget, both of which may set cookies. These are loaded only after you give consent via the cookie banner. We do not use advertising or tracking cookies. See our Cookie Policy for the full list.

7. Children's data

This website and service are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly. Clients under 18 require parental or guardian consent before booking a treatment.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where consent is the lawful basis)

To exercise any of these rights, contact us via Instagram or in person.

9. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision.