At bridalucent (www.bridalucent.com), accessible from www.bridalucent.com, we are committed to protecting your privacy and personal data. This Privacy Policy outlines how we collect, use, process, and store your information when you visit our website, submit inquiries, or book our bespoke on-site bridal hair and styling services.

1. Data Controller

For the purposes of applicable data protection legislation, including the European Union General Data Protection Regulation (GDPR) and relevant United States privacy laws:

• Data Controller: bridalucent
• Official Website: www.bridalucent.com
• Contact Email: bridal@bridalucent.com
• Jurisdiction: Operating from Germany, serving clients across Europe and the United States.

If you have any questions regarding how your personal information is managed, please contact us directly at bridal@bridalucent.com.

2. Information We Collect

We collect only necessary information required to process service bookings, facilitate client communication, and fulfill administrative obligations:

• Identity & Contact Details: Full name, email address, telephone number, and wedding or event location details provided during booking or inquiry submissions.
• Service Requirements: Event dates, scheduling specifications, and styling preferences submitted directly by you.
• Technical Data: Internet Protocol (IP) address, browser type, device information, and standard web access logs collected automatically during your visit to www.bridalucent.com.

3. Payment Processing & Third-Party Service Providers

We do not store or directly process full credit card numbers, debit card details, or financial credentials on our servers.

• Payment Processor: All payment transactions conducted on www.bridalucent.com are handled securely by Stripe, our designated third-party payment infrastructure platform.
• Direct Transmission: When you make a payment, your payment transaction details are transmitted directly to Stripe in accordance with their standard processing protocols.
• Independent Data Controller: Stripe acts as an independent data processor/controller regarding your payment credentials. We encourage you to review Stripe’s Privacy Policy to understand how they process payment information.

4. Legal Basis & Use of Data

We process personal data under the following legal frameworks:

• Performance of Contract: Processing necessary to execute booking agreements and deliver requested on-site styling services.
• Legal Obligation: Compliance with applicable German commercial, statutory, and accounting laws.
• Legitimate Interests: Operations management, customer service communication, and maintaining site functionality.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the operational, legal, and regulatory purposes outlined in this policy:

• Service & Booking Records: Retained for the duration of the engagement and for up to 7 to 10 years following service completion to comply with statutory German tax, commercial record-keeping, and regulatory obligation standards.
• General Inquiries: Personal data submitted for non-booking inquiries is retained for up to 12 months from the date of final communication, after which it is deleted or anonymized.
• Technical Access Logs: Server logs and technical access data are retained for a maximum of 30 to 90 days for maintenance and operational audit purposes before automatic erasure.

Once the relevant retention period expires, your data is securely deleted or rendered non-identifiable.

6. Your Data Rights

Depending on your jurisdiction (such as under European Union GDPR or relevant US State Privacy Statutes), you maintain specific rights regarding your personal information:

• Right of Access: You may request confirmation of whether your personal data is being processed and obtain a copy.
• Right to Rectification: You may request correction of inaccurate or incomplete personal records.
• Right to Erasure: You may request deletion of personal data where legal retention requirements no longer apply.
• Right to Restriction & Object: You may request restricted processing or object to data processing carried out under legitimate interest grounds.

To exercise any of these rights, please contact bridal@bridalucent.com.

7. International Data Transfers

As we operate from Germany and serve clients across Europe and the United States, personal data necessary for booking fulfillment and system support may be processed internationally. Any data transfer outside the European Economic Area (EEA) adheres to legal transfer mechanisms and standard contract frameworks to ensure data protection integrity.