Privacy Policy
Last updated: 12 April 2026
KEYLUMA ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect through keylumapro.com, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
KEYLUMA is a professional hair colour brand operated as part of the GA (Gennaro Aquila) portfolio, based in the United Kingdom. For any privacy-related queries, contact us at [email protected].
What Data We Collect
We collect only the information you voluntarily provide:
- Email address, submitted via our "Notify Me" launch signup form
We do not collect names, payment details, IP addresses, or any other personal information. We do not create user accounts on this website.
Why We Collect It
We collect your email address for the following purpose:
- To notify you when KEYLUMA products become available for purchase
The legal basis for processing your data is your consent, given when you submit the signup form.
How We Use Your Data
Your email address is used solely to send you launch notifications and product availability updates related to KEYLUMA. We will not use it for unrelated marketing or share it with third parties for their own marketing purposes.
Third-Party Services
Our signup form is processed by FormSubmit.co, a form submission service. When you submit your email, it is transmitted through their servers and delivered to us via email. FormSubmit.co does not store your data permanently. You can review their privacy practices on their website.
We do not use any other third-party services that process your personal data.
Cookies
This website does not currently use cookies. We do not use analytics, tracking, or advertising cookies. If this changes in the future, we will update this policy and provide appropriate notice.
Data Retention
We retain your email address for as long as it is needed to fulfil the purpose for which it was collected (product launch notifications). Once notifications have been sent, or if you request deletion, your email will be removed from our records within 30 days.
Data Security
We take reasonable measures to protect your personal data from unauthorised access, loss, or misuse. Email submissions are transmitted securely and access to collected data is restricted to authorised personnel only.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw your consent at any time
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact
If you have any questions about this privacy policy or how we handle your data, please contact us: