Privacy Policy

1Data controller

The person responsible for processing your personal data is:

2What personal data I collect

Depending on how you interact with me, I may collect the following data:

• Contact information: name, phone number, and email address, when you reach out via WhatsApp, email, or social media to inquire about or book a service.
• Service details: date and venue of your event, type of service, skin characteristics, and makeup preferences, necessary to prepare your appointment.
• Contract details: full name, national ID (DNI), and address, when you hire a bridal service and complete your profile in the client portal.
• Health data: allergies, dermatological or aesthetic treatments, and skin sensitivities that you voluntarily share so that the makeup does not cause a reaction. I process this data with your express consent and never share it.
• Complaints book data: name, national ID (DNI), address, and details of the complaint, in accordance with Indecopi regulations (Peru's consumer protection authority).
• Photographs: images from the services provided, which are only published with your express authorization.
• Browsing data: anonymous statistical information about your visit to this website (pages viewed, device, approximate location) through Google Analytics cookies.

3How I use your data

• To respond to your inquiries and coordinate bookings, makeup trials, and services.
• To deliver the contracted service and follow up before and after your event.
• To send you information you have requested (availability, services, preparation guides).
• To handle complaints submitted through the Complaints Book.
• To improve this website and my services based on anonymous usage statistics.

I do not use your data for purposes other than those described, nor do I send unsolicited mass advertising.

4Cookies and web analytics

This website uses Google Analytics 4, a Google tool that employs cookies to generate anonymous browsing statistics (number of visits, most viewed pages, device type). This information does not allow me to personally identify you.

You can disable cookies from your browser settings or install the Google Analytics Opt-out Browser Add-on. The website will continue to function normally.

5Client photographs

Photographs and videos of completed makeup work are part of my professional portfolio. I never publish images of a client without her permission. If you authorized the publication of your photos and later change your mind, you can request their removal at any time by writing to hola@sthefymaquilla.com.

6Your bridal portal

If you hired a bridal service, I give you access to a private space at sthefymaquilla.com/clientas, where you complete your event details. You log in with your national ID (DNI) and a six-digit code that I send you via WhatsApp; this code is stored encrypted and even I cannot see it, which is why if you lose it, I generate a new one.

There I collect what is necessary to prepare your contract and your service: full name, national ID (DNI), and address (because they go in the contract), your event details, and information you provide about your skin, allergies, and treatments. The latter is sensitive health data: you provide it when hiring me and I use it for one purpose only — to choose products that will not harm you on your wedding day. That is why the form asks for your express consent before submission, in accordance with Article 13 of Ley 29733 (Peru's Personal Data Protection Law).

You can log in to correct or update your data at any time, and ask me to delete it following the instructions below.

7Who I share your data with

I do not sell or transfer your personal data to third parties. I only use technology providers that process data on my behalf and under their own security guarantees:

• Google (Google Analytics): anonymous browsing statistics.
• Vercel: hosting for this website and the client portal.
• Supabase: database where your bridal profile is stored, with restricted access and encryption in transit.
• Meta (WhatsApp, Instagram): communication channels that you choose to contact me through.

Some of these providers may process data outside of Peru, constituting a cross-border data transfer covered by their privacy policies and security measures.

8How long I keep your data

I keep your data only for the time necessary to fulfill the purposes described: contact and service data, for the duration of our business relationship and applicable legal periods; Complaints Book data, for the minimum of two years required by Indecopi regulations; and authorized photographs, until you withdraw your consent.

9Your rights (ARCO)

As the owner of your personal data, you may exercise at any time your rights of access, rectification, cancellation, and opposition (known as ARCO rights under Peruvian law), as well as revoke your consent. Simply write to hola@sthefymaquilla.com stating your name, the right you wish to exercise, and attaching a copy of your identity document.

I will respond to your request within the timeframes established by law. If you believe your request was not properly addressed, you may file a complaint with Peru's National Authority for Personal Data Protection (Autoridad Nacional de Protección de Datos Personales) under the Ministry of Justice and Human Rights.

10Information security

I apply reasonable technical and organizational security measures to protect your data against unauthorized access, loss, or alteration: this website is served entirely over an encrypted connection (HTTPS), the client portal requires a national ID (DNI) and personal code, codes are stored encrypted using a key derivation algorithm (never in plain text), failed login attempts are temporarily blocked, and the management panel is protected with its own password.

11Changes to this policy

This policy may be updated to reflect legal changes or changes in our services. The current version will always be published on this page.

Effective since: August 2026.