PRIVACY POLICY

Last updated: October 2026

This page explains which personal data L'amour Beauty processes, why, how long we keep it and what your rights are.

1. Data controller

L'amour Beauty (org. no. 927 938 901)
Radarveien 2B, 1185 Oslo, Norway
Email: info@lamourbeauty.no
Phone: +47 929 85 562

2. Booking an appointment

When you book, we register your name, mobile number, email address, chosen treatment, date and time, and whether you would like numbing cream. We use this to manage your appointment, send a confirmation and a reminder the day before, and contact you about changes. The legal basis is our agreement with you (GDPR Art. 6(1)(b)).

Appointments may also be shown in the clinic's own phone calendar through a private calendar link. The link is secret and can be replaced if needed.

3. Client records and treatment notes

To give you the right treatment over time we keep a client record with contact details, previous appointments and any treatment notes. Notes that may concern your health are only processed when necessary for your treatment and only by the clinic's staff.

Digital consent form: If you fill in and sign the consent form on the website, we store your answers, the selected treatment, the time and the form text you signed. If you sign with Vipps, we receive your name, mobile number and date of birth from Vipps to confirm your identity (not your national ID number). Without Vipps, we store the name and mobile number you enter. The answers may contain health data. They are stored encrypted and are only available to the clinic. The data is necessary to give you safe and appropriate treatment (GDPR Art. 6(1)(b) and Art. 9(2)(h)).

4. Campaigns

If you sign up for a campaign, we register your name, mobile number, email and chosen treatment in order to contact you about the offer. The basis is the consent you give when signing up, which you can withdraw at any time by contacting us.

5. Storage and deletion

• Name, phone and email are removed from appointment records 36 months after the appointment. Date and treatment are kept without personal data for statistics.
• Clients with no appointments in the last 36 months are deleted from the client register.
• Signed consent forms are kept for as long as you are a client and it is necessary to document the treatment.
• Campaign sign-ups are deleted no later than 12 months after the campaign has ended.
• Accounting records (receipts and invoices) are kept for 5 years under the Norwegian Bookkeeping Act.
• Other enquiries are deleted no later than 12 months after the matter is closed.

6. Cookies

• Necessary: a session cookie while you book or sign the consent form (deleted when you close the browser), and lb_consent, which remembers your choice in the cookie banner (180 days). While you book, your browser remembers your name, phone and email in that tab until the booking is complete, so you don't have to type them again.
• Google Maps (requires consent): the map is only loaded if you choose “Accept all” or tap “Show map”. Google may then set its own cookies and receive your IP address.

Icons and fonts are hosted by us, so they do not send data to anyone else. You can change your choice at any time via “Cookie settings” at the bottom of the page, or by deleting cookies in your browser.

7. Who we share data with (processors)

• Our web host, which runs the website, database and email.
• Vipps MobilePay, only if you sign the consent form with Vipps. Vipps confirms your identity and sends us your name, mobile number and date of birth. Vipps does not receive your answers in the form.
• Google, only for the map (after consent) and if appointments are synchronised to a Google calendar. The reviews on the home page are fetched by our server – your browser does not contact Google to show them.

We never sell personal data or use it for advertising.

8. Your rights

You have the right to access, rectification, erasure and data portability, and you can request restriction of or object to the processing. Contact info@lamourbeauty.no and we will reply within one month. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).