Lulu Torio
Privacy notice
Who is responsible
Lulu Torio, a professional makeup artist based in Mexico City, is responsible for the personal data collected on this site.
What we collect
When you ask for a quote: your name, phone or email, the event details (date, place, number of people) and any notes you write.
In your beauty profile: name, email, skin type, style preferences and, if you have them, allergies or sensitivities, skin treatments and whether you wear contact lenses.
Allergies, sensitivities and skin treatments are sensitive personal data (health). They are only kept if you give your express consent by ticking the box on the form.
Payments are made on Stripe’s page. This site never receives or stores your card or bank details.
What we use it for
To answer your quote, hold your date, take payment and prepare your makeup and hair: choosing products that are safe for you and the style you asked for.
We don’t use your data for advertising and we don’t sell it.
Who it is shared with
Stripe, to process payments (your name, email and the amount).
Cloudflare, which hosts this site and its database.
Whoever organises your booking sees your name, whether you filled in your profile and whether your part is paid, but not your answers. Only Lulu sees your answers.
How long we keep it
Beauty profile answers are deleted 90 days after the event.
Booking and payment records are kept for as long as tax rules require.
Your rights
You can access, correct or delete your data, object to its use (ARCO rights) and withdraw your consent. You can change your answers at any time from your personal link.
For anything else, write through the site’s contact page with your name and booking folio. We reply within 20 business days.
Changes to this notice
If this notice changes, the current version will always be on this page.
If you work with the house (team)
To hire and pay you we keep: name, email, phone, area, CURP, RFC and tax regime, CLABE and bank, emergency contact, your photo, your official ID, your tax status certificate and, if you upload them, proof of address and certificates. Bank and financial data need your express consent, which you give when you register.
We use them for your contract, to pay you, to invoice, and to verify your identity (Lulu compares your photo with your ID and checks your CURP and tax certificate on the government portals) and your badge. Lulu and her accountant see them. Your documents are stored encrypted in Cloudflare’s storage and are never published.
Your badge can be verified with its QR: it shows your photo, name, role and whether you are active. Nothing else.
Your signed contracts keep your name, your signature, the date, your IP address and the text’s fingerprint, as proof of what you signed.
We keep your data while you work with us and afterwards for as long as tax rules require (up to 5 years). You can exercise your ARCO rights through the contact page.
The terms of the service are in the terms and conditions.
Last updated: November 2026.