Privacy policy
What Receipts collects, why it needs it, who else handles it, how long it is kept and how to use your rights.
On this page16 sections
- 01Who we are
- 02What we collect
- 03Photos, faces and beauty profiles
- 04Why we use it, and on what basis
- 05AI and automated processing
- 06Review checks and disputes
- 07What other people can see
- 08Who we share it with
- 09Data outside the UK
- 10How long we keep it
- 11Your rights
- 12Children and young people
- 13Keeping it safe
- 14Cookies
- 15Changes to this policy
- 16Contact and complaints
Who we are
Receipts is run by [COMPANY LEGAL NAME], registered in England and Wales (company number [COMPANY NUMBER]), at [REGISTERED ADDRESS]. We are the controller of the personal data described here. Our ICO registration number is [PENDING ICO REGISTRATION].
This policy covers everyone who uses Receipts: people browsing without an account, people with an account, and professionals who run a page. When a provider keeps their own notes about a client, they decide how those notes are used.
What we collect
When you browse or search without an account
The words you search for, any photo you search with, the area you choose, and an anonymous identifier stored in a cookie so a search can continue across pages. We keep a one-way hash of your IP address to limit abuse. We never link this to your name.
When you have an account
- Your email address, display name and how you sign in (email code, passkey or Google).
- Sign-in sessions: the device, browser and approximate location (country or region) of each one, so you can see and end them.
- Your public profile if you make one: @name, bio, pronouns and links to other social accounts.
- Your settings, time zone and usual area.
- What you save and create: lookbooks, looks, Look Requests, messages, reviews and reports.
- Bookings: the attendee's name, whether they are an adult or under 18, notes, price and any deposit.
- Your confirmation that you are 18 or over when you create an account, with the date you gave it.
- Your answers to consent questions, with the date you gave them.
When you run a business page
Your business name, services, prices, hours, places of work, contact details, team members, portfolio, and the evidence you send to claim the page. If you take payments, the card brand and last four digits of your plan's card and your payout bank's name and last four digits. Full card and bank numbers stay with the payment provider.
Some pages were created by Receipts from public sources, such as a business's own website, before the business claimed them. The business can claim, correct or remove the page.
When you use the product
Product events, such as searches run, results opened and looks saved, help us see what works. If you turn analytics on, error reports and performance data from your browser go to Grafana to help us fix faults. With analytics off, your browser sends them nothing.
Photos, faces and beauty profiles
Photos of hair, makeup and skin can reveal racial or ethnic origin, and a face can be biometric data. UK GDPR treats these as special category data, so we limit what we do with them.
- A face detector running on our own servers finds faces only to choose how a photo is cropped. We do not identify anyone, compare faces or store face templates.
- Your beauty profile is the optional hair and makeup questions you can answer during sign-up or later in settings. Hair answers and favourite makeup finishes help match results to you. We never infer ethnicity from any of it, and you can change or delete it in settings.
Your skin tone
- What we collect
- The skin tone range you choose on the Monk Skin Tone Scale, and your undertone. Only you see them. We never work them out from your photos.
- Why
- To improve your search results and makeup matching, such as shades and undertones, and similar recommendations.
- Lawful basis
- Your explicit consent (UK GDPR Article 9). We ask separately the first time you add a skin tone, and the box is never ticked for you. Without it, we do not store your skin tone.
- How to withdraw
- Withdraw at any time in privacy settings. We delete your stored skin tone straight away, apart from backups, and keep a record that you withdrew and when.
Where we rely on your explicit consent, you can withdraw it in privacy settings and we stop using that data from then on.
Your visit preferences
You can filter searches for arrangements such as a quiet appointment or a private room. These choices may reveal health or religious needs. We save them only when you explicitly agree; the save box is never ticked for you. Providers and delegated support cannot see your saved preferences. We do not infer them from photos or use them for AI or search learning. Uncheck a need to switch it off for one search, or delete saved needs and withdraw consent in Filters or privacy settings. Withdrawal deletes the saved profile, apart from backups, and keeps a record of your consent decision. Your own export includes saved needs.
Your visit answers
When writing a review, you can confirm details you say you chose when finding or booking that visit. Saving these answers needs separate explicit consent. They stay off individual reviews and are not shared with the business or delegated support. We show grouped public confirmations and staff signals about unmet promises only from five distinct clients, in bands of five. They are client recollections, not verified booking records. “Not sure” is not saved or counted.
Your own export includes saved answers. Delete submitted and draft answers and withdraw consent in privacy settings; your review stays. We do not use these answers for AI or search learning. Deleted data can remain in backups for up to 35 days.
Why we use it, and on what basis
- Contract
- Running your account, searches, lookbooks, messages, Look Requests, bookings and plans.
- Legitimate interests
- Security, preventing fraud and abuse, checking and deciding disputes about reviews, fixing errors, improving search from feedback, and counting usage without identifying you.
- Consent
- Analytics cookies and browser error reports, marketing emails, your beauty profile, your skin tone (explicit consent), and including your photos in training datasets. Each is off until you turn it on.
- Legal obligation
- Keeping payment records, answering lawful requests, child-safety duties, and taking reasonable steps against fake reviews.
We do not sell your personal data, and we do not use it for advertising on other sites.
AI and automated processing
Describing photos
Google's Gemini model suggests tags for a photo, such as the style or technique. A tag stays a suggestion until a person confirms it. We shrink photos before sending them.
Safety checks
The same model checks new photos for content that breaks our rules, including signs that a person may be under 18. A check can hold a photo for staff review. A member of staff makes the final decision.
Finding similar work
Voyage AI turns photos and search text into numbers that let us find similar work. Those numbers follow the photo: when it is deleted, they are too.
Reply drafts for providers
Drafts are built from the provider's own services and prices. Providers on paid plans can choose to send them automatically.
Training
We do not train AI models on your content. We may build datasets for future training only from photos of people who opted in, which is off by default. Anonymous uploads are never included, and withdrawing removes you from future datasets.
We have not confirmed how long Google and Voyage keep the data we send them, and we do not claim that they keep none.
Review checks and disputes
Check evidence
What: the receipt, booking confirmation or deposit screenshot you or a provider send so we can check a review, and the reason for any decision.
Why and on what basis: to keep reviews genuine and to meet our duty to take reasonable steps against fake reviews. Our lawful basis is legitimate interests, and our legal obligation under the Digital Markets, Competition and Consumers Act 2024. Sending evidence is always your choice.
Who sees it: only Receipts trust and safety staff. It is never shown on the review, never given to the other person, never read by AI and never used in search. Staff see it blurred until they choose to reveal it, and we record who did.
How long: we delete it 30 days after the decision. If the same review is under a dispute, appeal or legal claim, we keep it until that ends. We keep only a record of who decided, when, the outcome and the reason code.
Dispute records
When a provider disputes a review, or a reviewer reports a reply, we keep the grounds, each side's response, the decision, any appeal, and for a defamation notice the complainant's details and each step with its time. We keep them so we can show how a decision was made and defend it if challenged, on the basis of legitimate interests and legal obligation.
If you delete your account
Your reviews, their updates, replies to them, and any check evidence are deleted. Case decisions are kept without your name or account, because the other person relied on them. If you only deactivate, your reviews stay and show your name as “Former client”.
What other people can see
- Anyone
- Your public profile, lookbooks you make public, reviews you post, and every business page.
- People you share with
- Lookbooks you share by link or invite.
- Matched professionals
- Your Look Request: area, budget, notes and reference photos. Not your email.
- The provider you book
- The attendee's name, adult or under 18, and your booking notes.
- Only the people in it
- A conversation and its attachments.
Data outside the UK
Our servers are in the EU. Google, Voyage AI and, once switched on, Stripe, Meta and Apple process data in the United States. We protect these transfers with the UK International Data Transfer Agreement or Addendum, or the UK–US data bridge where the company is certified. Ask us for a copy of the safeguard that applies.
How long we keep it
- Anonymous photo search
- 1 hour
- Signed-in photo search
- 14 days
- Search and tag feedback
- 90 days, then only totals are kept
- Recommendation activity
- 30 days
- “Less like this” choices
- 180 days
- Notifications
- 180 days
- Support reports
- 90 days
- Review check evidence
- 30 days after the decision
- Review check and dispute decisions
- While the review exists, then without your identity
- Product events
- 400 days
- Error logs and performance data
- 14 days
- Sign-in sessions
- 30 days
- Your data export file
- 24 hours after it is ready
- A previous @name
- 90 days, or a year for a business
- Look Requests
- Open for 14 days, then kept as closed history on your account
- Conversations
- Message text removed 24 months after a thread closes
- Account, profile, lookbooks, reviews
- While your account is open
- Skin tone
- Until you delete it or withdraw consent
- Private visit preferences
- Until you delete them or withdraw consent
- 18 or over confirmation
- While your account is open
- Backups
- 35 days
We keep some records longer when they are needed for a dispute, a safety investigation or a legal claim, and only for as long as that lasts.
Your rights
You can ask to see, correct, delete or move your data, and object to or restrict how we use it. Where we rely on consent, you can withdraw it at any time.
- Download your data from Your data in settings. The file is available for 24 hours.
- Delete your data by sending a deletion request from the same page. We check it, then delete your content and photos, including copies held by our delivery network. Audit records and anything under a legal hold are kept as long as required.
- Deactivate your account if you want to stop using it but keep your data.
Or write to privacy@receipts.beauty. We reply within one month. If you live in the United States, these rights apply to you too, and we do not sell or share your personal information for targeted advertising.
Children and young people
You must be 18 or over to have an account. A parent or guardian can book an appointment for someone under 18, and the provider sees that the attendee is under 18. Our safety checks flag photos that may show a child, and staff review them. If you think a child is shown in a way they should not be, report it or write to hello@receipts.beauty.
Keeping it safe
Data is encrypted in transit. Sign-in supports passkeys. Tokens for connected accounts, such as Instagram, are encrypted at rest. Private photos are served through links that expire. Staff access depends on their role, and staff actions are recorded in an audit log.
Changes to this policy
We will update this page when the product changes. If a change affects how we use your data, we will tell account holders by email before it takes effect.
Contact and complaints
Write to privacy@receipts.beauty or [COMPANY LEGAL NAME], [REGISTERED ADDRESS].
You can complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113. We would like the chance to put things right first.