Privacy Policy

2.1. Data We Collect

When you interact with our Booking component, we collect explicit personal information necessary to handle your luxury service inquiries. This data is transmitted through our secure API endpoints (/api/convert or matching internal structures):

• Identity Data: Full Name.
• Contact Data: Email Address and Phone Number (including WhatsApp endpoints).
• Booking Details: Your custom message, event dates, locations, and styling requests.

2.2. Purpose of Data Processing

We process your personal information exclusively for the following lawful reasons:

• To respond to your booking inquiries and coordinate calendar slots.
• To provide direct client communication via email or telephone/WhatsApp regarding your requested services.
• To fulfill our legal, accounting, and tax obligations across our operational bases in the UAE and India.

2.3. Third-Party Infrastructure and Hosting

LushByNaz does not sell or lease your personal information to third-party marketers. Your data is handled using secure production infrastructure provided by our vendors:

• Hosting Platform: Our Site code and media streams run on Vercel, utilizing standard cloud delivery networks to maintain performance.
• Fonts and CDNs: Universal typefaces (e.g., Geist) are rendered via cloud dependencies optimized to strip out trackers.

2.4. Data Retention

We retain your form submission data only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. If an inquiry does not result in a booked service, your submission record is securely purged within an appropriate administrative timeframe.

2.5. Your International Data Protection Rights

Depending on your geographical location, you have distinct rights regarding your personal information under regional frameworks, including the UAE Data Protection Law (Federal Decree-Law No. 45 of 2021), the Indian Digital Personal Data Protection (DPDP) Act, and global standards like GDPR:

• Right to Access: You can request copies of the personal data we hold about you.
• Right to Correction: You can request that we correct any information you believe is inaccurate.
• Right to Erasure (Deletion): You can request that we wipe your contact form records from our active servers, provided there is no ongoing contractual or legal override requiring its storage.

To exercise any of these rights, please contact us directly through our primary communication endpoints listed in the footer/connect layouts.