Privacy Policy

This policy explains how Azury Digital collects, uses and protects personal data in connection with the Lushera website and the Lushera salon-management software, and sets out your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. Who we are

Lushera is a product of Azury Digital & Tech Solutions Ltd ("Azury Digital", "we", "us"), a company registered in England and Wales (company number 13446812). Our registered office is 23a The Precinct, London Road, Waterlooville PO7 7DT. We are registered with the Information Commissioner's Office (ICO) under reference ZC188926. You can contact us about privacy at info@azurydigital.co.uk.

2. Controller and processor — two different roles

When you deal with us directly — visiting this website, joining the waitlist, making an enquiry, or holding a Lushera account with us — Azury Digital is the data controller of your information.

When a salon uses Lushera to hold information about its own clients and staff, the salon is the data controller of that data and Azury Digital acts as its data processor — handling the data only on the salon's instructions and to provide the service, under a data processing agreement (see section 9).

3. This website and the waitlist

This is a static marketing site. If you join the waitlist, request a demo or send us an enquiry, we collect the details you give us — typically your name, email address and anything you choose to tell us about your business. We use this only to respond to you and to let you know when Lushera opens up.

• Lawful basis: your consent when you choose to contact us or ask to be kept informed, and our legitimate interest in responding to enquiries about our product.
• Retention: we keep waitlist and enquiry details only for as long as needed to follow up, and remove them on request or once they are no longer relevant.
• You can ask us to remove you from the waitlist at any time by emailing info@azurydigital.co.uk.

4. Cookies and tracking

This website uses no tracking or analytics cookies, no advertising cookies and no third-party tracking scripts. It loads no external fonts, scripts or CDNs. The Lushera application itself uses a single functional token to keep you securely signed in — this is essential to the service and is not used to track you.

5. The Lushera product — data we process for salons

When Lushera is live, Azury Digital processes the following categories of data on behalf of each salon (the controller), strictly to provide the service:

• Staff accounts — the login and role details of the salon's owners, managers, stylists and front-desk staff.
• Salon clients' personal data — contact details, appointment and visit history, and free-text notes.
• Colour-formula records — dated notes of the products and mixes used for a client.
• Patch-test dates — recorded to guard colour bookings. Because these relate to a person's health, they are treated as special-category (health-related) data and are processed only on the salon's instruction and to deliver the safety feature the salon has chosen to use.
• Marketing consent and opt-out flags — recording whether a client has agreed to receive offers and news, so that campaigns only ever reach people who have opted in.

Each salon is responsible for having a lawful basis to hold information about its own clients and staff, and for obtaining any consent required (including for patch-test records and marketing). Lushera provides tools to export or delete a client's data on request.

6. Who we share data with (sub-processors)

We never sell personal data. To run the service we use a small number of trusted providers, acting as our sub-processors and only for the purposes below:

• A transactional and marketing email provider — to deliver account emails, booking confirmations, reminders and the salon's opted-in marketing.
• The salon's own SMS gateway (for example Twilio) — texts are sent through the salon's own connected provider account; the per-text cost is borne by the salon.
• Stripe — for card payments and deposits when that feature goes live. We do not see or store full card details.
• Our UK/EU cloud hosting provider — which runs the servers the data sits on.

We may also disclose data where the law requires it. A current list of sub-processors is available to salons on request.

7. How we protect data

• Encryption in transit for all connections, and encryption of stored secrets such as a salon's SMS provider credentials.
• Two-factor authentication available on sign-in.
• Per-salon data isolation — every record is scoped to one business, and every query is filtered by it, so no salon can see another's data.
• Role-based access so staff only see what their role allows.
• Lushera has passed an independent security review.

8. Where data is stored, and international transfers

Data is hosted within the UK/EU. Where any provider we use processes data outside the UK, we rely on an appropriate safeguard recognised under UK data protection law (such as UK adequacy regulations or the International Data Transfer Agreement / addendum).

9. Retention and the data processing agreement

We keep personal data only for as long as needed to provide the service and to meet our legal, accounting and tax obligations, then delete or anonymise it. Where Azury Digital acts as a salon's processor, we handle its data only for as long as the salon's account is active and in line with our instructions. A Data Processing Agreement (DPA) setting out these obligations is available to salons.

10. Data breaches

We have measures in place to detect and respond to personal-data breaches. Where a breach is likely to result in a risk to people's rights and freedoms, we will notify the ICO within 72 hours where required, and — where Azury Digital acts as processor — we will inform the affected salon without undue delay so it can meet its own obligations.

11. Your rights

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its use, and to data portability. To exercise any of these, email info@azurydigital.co.uk and we will respond within one month. If your data is held by a salon using Lushera, that salon is the controller and we will pass your request to them or help them action it.

12. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed.

14. Contact

Azury Digital & Tech Solutions Ltd, 23a The Precinct, London Road, Waterlooville PO7 7DT, United Kingdom — info@azurydigital.co.uk.