Privacy Policy

Last updated: 19 September 2026

1. Who is responsible for your personal data?

The data controller is:

Nicoleta Butuc
trading as Colour Identity Studio

4 Impasse Jean-Baptiste de Seyl
6197 Eisenborn, Junglinster
Luxembourg

Email: contact@colouridentity.lu

Colour Identity Studio processes personal data in accordance with the General Data Protection Regulation, Regulation (EU) 2016/679, and applicable Luxembourg data protection law.

Under GDPR, you have the right to be informed about who processes your personal data, why it is processed, the legal basis used, who may receive it, how long it is kept and what rights you have. CNIL

2. What personal data may be collected?

Depending on how you interact with Colour Identity Studio, the following personal data may be collected:

  • name;

  • email address;

  • telephone number;

  • booking and appointment information;

  • information provided through booking forms or questionnaires;

  • correspondence with Colour Identity Studio;

  • information relevant to your Colour Analysis session;

  • your personal Colour Analysis result;

  • information required to prepare your bespoke Colour Analysis Magazine;

  • invoice and payment information;

  • gift voucher information;

  • photographs or images where you have separately agreed to their use;

  • technical information such as IP address, browser, device and cookie-related information.

Only information reasonably necessary for the relevant purpose will be collected.

3. Why your personal data is used

Your personal data may be processed for the following purposes.

Managing enquiries and bookings

To respond to enquiries, arrange appointments, manage bookings and communicate with you before and after your session.

Providing your Colour Analysis service

To prepare for and conduct your Colour Analysis session and provide the services you have requested.

Preparing your Colour Analysis Magazine

To prepare and provide your personalised digital Colour Analysis Magazine and associated materials.

Invoicing and payment

To prepare invoices, record payments and maintain appropriate accounting and business records.

Payment for Colour Analysis sessions is currently made after the appointment by bank transfer or QR payment using the information provided on your invoice.

Gift vouchers

To issue, administer and redeem Colour Identity Studio gift vouchers.

Website operation and security

To operate and protect the website, manage technical functionality and prevent misuse.

Optional photographs and promotional content

Where photographs or other content may be used for promotional or social-media purposes, this will only be done where an appropriate legal basis applies, including consent where required.

Agreeing to promotional photography is not a condition of receiving a Colour Analysis service.

4. Legal bases for processing

Depending on the purpose, Colour Identity Studio may rely on the following legal bases:

Performance of a contract or steps before entering into a contract
For example, processing information required to manage your booking or provide your Colour Analysis service.

Legal obligation
For example, retaining accounting or invoicing information where required by law.

Legitimate interests
For appropriate business administration, customer service, website security and the establishment, exercise or defence of legal claims, provided those interests do not override your rights.

Consent
Where consent is required, including certain optional cookies or specific promotional uses of photographs.

These are recognised lawful bases under Article 6 GDPR. CNIL

5. Acuity Scheduling and Squarespace

Colour Identity Studio uses Squarespace to operate the website and may use Acuity Scheduling to manage appointments.

When you make a booking, information you enter may be processed through these services.

This may include:

  • your name;

  • contact information;

  • appointment type;

  • appointment date and time;

  • questionnaire responses;

  • other information you voluntarily provide during booking.

These providers process information according to their own privacy and data-processing arrangements.

6. Heyzine and your Colour Analysis Magazine

Colour Identity Studio may use Heyzine to host or deliver personalised digital Colour Analysis Magazines.

Your Magazine may contain information such as:

  • your name;

  • your Colour Analysis result;

  • your seasonal palette;

  • personalised Colour Analysis recommendations.

Only information required to prepare and provide your Magazine will be used for this purpose.

7. Payments

Colour Identity Studio does not currently collect payment when you make an appointment booking.

After your Colour Analysis session, an invoice will be issued.

Payment may be made by:

  • bank transfer; or

  • QR payment where included with the invoice.

Colour Identity Studio does not require or store your complete bank-card information as part of this process.

8. Cookies

The website uses cookies and similar technologies.

Some cookies are essential for the operation of the website. Optional cookies are only used where permitted and, where required, after you have given your consent.

For more information, please see the:

Cookie Policy: /cookie-policy

You can also review or change your cookie choices through the Cookie Settings control on the website.

9. Who may receive your personal data?

Where necessary, information may be processed by service providers that support Colour Identity Studio, including providers of:

  • website hosting;

  • appointment booking;

  • email;

  • digital publications;

  • accounting or invoicing;

  • mapping;

  • technical infrastructure.

Personal data will only be shared where reasonably necessary for the relevant purpose or where required by law.

GDPR requires privacy information to identify recipients or categories of recipients where applicable. CNIL

10. International data transfers

Some service providers may process personal data outside Luxembourg or outside the European Economic Area.

Where this occurs and GDPR requires additional safeguards, Colour Identity Studio will rely on an appropriate legal transfer mechanism, such as an adequacy decision or contractual safeguards.

GDPR requires individuals to be informed where international transfers occur and about the relevant safeguards. CNIL

11. How long is your information kept?

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected and for any applicable legal, accounting or business requirements.

Booking and client information may be retained for a reasonable period following your appointment where necessary for customer service, record keeping or potential legal claims.

Accounting documents are retained in accordance with applicable Luxembourg requirements. Luxembourg guidance states that relevant accounting documents are generally kept for 10 years. Guichet.public.lu

Information processed solely on the basis of consent may be deleted earlier where consent is withdrawn, unless another lawful reason requires continued retention.

12. Your rights

Subject to the conditions and exceptions under GDPR, you may have the right to:

  • access your personal data;

  • correct inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain processing;

  • receive certain personal data in a portable format;

  • withdraw consent where processing is based on consent.

GDPR requires these rights, the applicable retention information and the right to complain to a supervisory authority to be communicated to individuals. CNIL

To exercise your rights, contact:

contact@colouridentity.lu

13. Complaints

If you have concerns about how your personal data is handled, you are encouraged to contact Colour Identity Studio first so the issue can be reviewed.

You also have the right to lodge a complaint with the Luxembourg supervisory authority:

Commission nationale pour la protection des données - CNPD

14. Security

Colour Identity Studio takes reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction.

15. Automated decision-making

Colour Identity Studio does not use personal data for automated decision-making that produces legal or similarly significant effects.

Your Colour Analysis result is based on professional assessment during the session rather than an automated decision-making system.

16. Changes to this Privacy Policy

This Privacy Policy may be updated when:

  • services change;

  • website functionality changes;

  • service providers change;

  • legal or regulatory requirements change.

The date at the top of the page shows the latest version.

17. Contact

For privacy-related questions or requests:

Colour Identity Studio
Nicoleta Butuc
4 Impasse Jean-Baptiste de Seyl
6197 Eisenborn, Junglinster
Luxembourg

Email: contact@colouridentity.lu