Privacy Policy

2.1. Data We Collect

When you interact with our Booking component, we collect explicit personal information necessary to handle your luxury service inquiries. This data is transmitted through our secure API endpoints (/api/convert or matching internal structures):

• Identity Data: Full Name.
• Contact Data: Email Address and Phone Number (including WhatsApp endpoints).
• Booking Details: Your custom message, event dates, locations, and styling requests.

2.2. Purpose and Legal Basis of Processing

We process your personal information exclusively for the following lawful reasons:

• Contractual Necessity: To respond to booking inquiries, coordinate calendar slots, and take required steps prior to entering into a formal styling agreement.
• Explicit User Consent: To run optional web analytics, usability heatmaps, and marketing attribution tags (Vercel Analytics, Google Analytics, Google Clarity). You can withdraw or adjust your consent choices at any time.
• Legal Obligations: To comply with legal, accounting, and tax duties under UAE regulations.
• Legitimate Interests: To maintain site stability, identify security bugs, block spam form submissions, and protect our system infrastructure.

2.3. Third-Party Infrastructure and Analytics

LushByNaz does not sell or lease your personal information. To optimize site performance and understand user engagement, we integrate secure infrastructure and optional analytics platforms:

• Hosting Platform: Our Site code and media streams run on Vercel, utilizing standard cloud delivery networks to maintain performance.
• Analytics & Usability: If you consent to optional cookies, we load Vercel Analytics (for performance metrics), Google Analytics (for traffic analysis), and Google Clarity (for usability insights). We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, review the Microsoft Privacy Statement.
• Fonts and CDNs: Universal typefaces are rendered via cloud dependencies optimized to strip out trackers.

2.4. Data Retention

We retain your form submission data only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. If an inquiry does not result in a booked service, your submission record is securely purged within an appropriate administrative timeframe.

2.5. Cross-Border Data Transfers

Because our hosting and analytical services rely on global cloud vendors (such as Vercel, Google, and Microsoft), data collected on our platform may be stored and processed on servers located outside of the UAE or your home country. We ensure that these transfers comply with applicable Data Protection Laws through standard security controls and data processing agreements.

2.6. Your International Data Protection Rights

Depending on your geographical location, you have distinct rights regarding your personal information under regional frameworks, including the UAE Data Protection Law (Federal Decree-Law No. 45 of 2021) and global standards like GDPR:

• Right to Access: You can request copies of the personal data we hold about you.
• Right to Correction: You can request that we correct any information you believe is inaccurate.
• Right to Erasure (Deletion): You can request that we wipe your contact form records from our active servers, provided there is no ongoing contractual or legal override requiring its storage.
• Right to Restrict or Withdraw Consent: You can restrict or withdraw consent to optional trackers (analytics and marketing) at any time.

2.7. Data Controller and Contact Information

For the purposes of applicable Data Protection Laws, the Data Controller of this website is:

To exercise your data protection rights or query our data protection practices, please contact us directly at the email address listed above.