Effective 20 August 2026
Privacy Policy
What we collect, why we collect it, how long we keep it, who else sees it, and what you can make us do about it.
Who we are
Salonfeed is operated by AESTHETICS BY STEPHANIE LTD, Unit 1 Bloom Farm, Main Street, Livingston Village, Livingston, Scotland, EH54 7AF. For the purposes of the UK GDPR and the Data Protection Act 2018 we are the controller of the personal data described on this page. You can reach us at support@aestheticsbystephan.com or +44 7715070877.
The short version
Four things are worth knowing before the detail.
- Images you add are never used to train a model. Not ours, not anyone else’s. They are used to make the piece you asked for and for nothing else.
- We do not receive or process images that identify a person. Photographs containing faces or bodies are refused in your own browser and never uploaded.
- We do not sell or share personal information for cross-context behavioural advertising, and we never have.
- We never see your card details. Payment is handled entirely by our payment provider; we receive a confirmation that a payment succeeded, the last four digits, the card brand and the country, and nothing more.
What we collect
Account information
Your email address, a password stored only as a cryptographic hash, and optionally a business name you choose to display. This is what an account is.
Subscription information
Which plan you are on, whether it is billed monthly or yearly, when the current period started and ends, when you agreed to the subscription terms and the exact renewal wording you were shown at that moment, and a record of payments and refunds. We keep the consent record because a payment dispute is answered with evidence rather than assertion.
Usage information
Which categories you picked, how many pieces and clips you produced, how many credits each action cost, and when. This is what makes your billing page an accurate account of what you spent.
Content you create
The briefs you type, the weeks that are planned for you, the pieces produced, and the text you compose over them.
Technical information
IP address, browser and device type, and pages requested, in server logs. These are used to keep the service running, to investigate faults and to detect abuse.
Images you add
This category has its own section because it is the one that matters most here.
Salonfeed accepts photographs of rooms, tools, products and materials. It does not accept photographs of people. Before an image is uploaded it is examined in your browser using the face and body screen described in What Salonfeed is not. If a person appears in it, the upload is refused, the reason is shown to you, and the file does not leave your device. We therefore do not receive it, do not store it, and have nothing to delete.
For images that pass, the following applies without exception: they are used to produce the piece you asked for; they are not used to train, fine-tune or evaluate any model; they are not sold, licensed or shared with anyone for their own purposes; and they are deleted no later than 30 days after upload, or immediately when you delete them, whichever comes first.
You can delete any uploaded image from the week it belongs to at any time. Deletion is immediate in the interface and completes in backups within 30 days.
Why we are allowed to process it
- To perform our contract with you — running your account, producing what you ask for, taking payment, providing support.
- Our legitimate interests — keeping the service secure, preventing abuse and fraud, understanding in aggregate which features are used. We have considered your interests against ours in each case and will explain our reasoning if you ask.
- Your consent — optional cookies, and any marketing email. Consent can be withdrawn at any time and withdrawing it is as easy as giving it.
- Our legal obligations — tax and accounting records, and responding lawfully to valid requests.
How long we keep it
- Account information: while your account exists, then 30 days.
- Uploaded reference images: up to 30 days, or until you delete them.
- Content you produced: while your account exists, then 30 days.
- Payment, consent and usage records: seven years, because tax law requires records of transactions to be kept.
- Server logs: 90 days.
Closing your account starts the deletion of everything except the records we are required to keep.
Who else sees it
We use a small number of service providers, each processing only what its function needs, and each bound by a written contract that forbids using your data for its own purposes:
- Hosting and content delivery, to serve the site and store your account and content.
- A payment provider, to take payment. It receives your card details directly; we do not.
- A generation provider, to produce imagery and clips from the briefs assembled by this site.
- Email delivery, for account and service messages.
We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not give it to anyone for their own marketing.
Where it is processed
Salonfeed is available worldwide and some of our providers operate outside the United Kingdom. Where personal data is transferred out of the UK, the transfer is covered by UK adequacy regulations, or by the International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses, together with an assessment of the destination. A copy of the safeguards used for any particular transfer is available on request.
Your rights
Under the UK GDPR and the EU GDPR you can ask us to:
- tell you what we hold about you and give you a copy;
- correct anything inaccurate;
- delete what we hold, where no legal duty requires us to keep it;
- restrict what we do with it while a question about it is resolved;
- give you the data you provided in a portable, machine-readable form, or send it to someone else;
- stop processing based on legitimate interests, by objecting and telling us why it affects you;
- stop any direct marketing, immediately and without needing a reason.
Email support@aestheticsbystephan.com. We answer within one month, without charge, and we will not make you explain yourself to get an answer.
Rights if you are in California
If you are a California resident, the CCPA as amended gives you the right to know what personal information we collect and why, to delete it, to correct it, and to be free from discrimination for exercising any of those rights. In the past twelve months we have collected the categories described above, for the purposes described above.
We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing for you to opt out of — but we honour Global Privacy Control signals as an opt-out anyway. To make a request, email the address above. You may use an authorised agent, and we will verify the request against your account.
Automated decisions
Two automated checks run on content: the face and body screen, and the category and prescription-medicine filters. They decide whether a piece of content can be produced. They make no decision about you, your account, your access or your money, and they have no legal effect on you. If a check refuses something you believe it should have allowed, tell us and a person will look at it.
Children
Salonfeed is for people aged 18 or over. It is not directed at children and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, write to us and we will delete it.
Cookies
We set only what is strictly necessary unless you agree to more. The detail, including how to change your mind, is in the cookie policy.
Security
Everything travels over HTTPS. Passwords are stored only as salted hashes. Access to production systems is limited to the people who need it and is logged. Card details never touch our systems. No system is perfect; if a breach occurs that is likely to result in a risk to your rights, we will tell the Information Commissioner’s Office within 72 hours and tell you without undue delay where the risk is high.
Changes
If we change this policy we will update the effective date at the top, and for any change that materially affects your rights we will email you at least 14 days before it takes effect.
Contact and complaints
Write to support@aestheticsbystephan.com or to AESTHETICS BY STEPHANIE LTD, Unit 1 Bloom Farm, Main Street, Livingston Village, Livingston, Scotland, EH54 7AF.
If you are not satisfied with our answer you can complain to the Information Commissioner’s Office, the United Kingdom’s data protection regulator, at ico.org.uk. If you live in the European Economic Area you may complain to the supervisory authority in your own country instead. Complaining to a regulator does not stop you from pursuing any other remedy.