Business data terms · 5 November 2026
How we handle client data.
These terms form part of Meet My Look’s business terms. The clinic is responsible for its clients’ data. SFG Consulting Limited processes that data to supply Meet My Look. An agency must have authority to give instructions for its clinic clients.
What the processing covers
Meet My Look receives adult client photos and contact details, makes AI illustrations, stores reports and passes requested results to the clinic’s chosen messaging service. Data includes photos, names, email, optional phone, treatment choice, consent records and source tags. People covered are prospective or existing clinic clients. Do not submit health records, children’s data or photos for identification.
Processing lasts while the service is provided, followed by the retention shown on the request form, normally 30 days. Artist reference photos remain until removed. Payment and account records are handled separately under the privacy notice.
Your instructions
Use of the agreed service and its settings gives us documented instructions. We process client data only under those instructions, including for transfers, unless law requires otherwise. We will tell you if an instruction appears unlawful or we must depart from it, unless prohibited. The clinic provides lawful instructions, accurate notices and permissions.
Our commitments
We restrict access, require confidentiality and use appropriate security measures. We help with data requests, breaches, security duties and impact assessments, taking account of the service and information available. We notify the clinic without undue delay after becoming aware of a personal data breach.
At the end of processing, we delete or return client data at the clinic’s choice, including copies, unless law requires retention. We provide information needed to show compliance and allow and contribute to reasonable audits, while protecting other customers’ information. Nothing here removes either party’s direct legal duties.
Service providers
You give general written permission for the hosting providers used by OpenAI Sites, including Cloudflare for storage and delivery, OpenAI’s image API, and Resend for built-in transactional email. We require appropriate processing terms, remain responsible for our subprocessors’ performance and use valid safeguards where required for international transfers. We will notify the account email before adding or replacing a subprocessor and give a reasonable chance to object before the change takes effect. Contact us if an objection cannot be resolved.
The clinic selects and controls its own messaging and booking providers and must review their terms. Meet My Look sends them the requested report link and contact details, without raw photo files. Anyone holding a valid result link can see the report until it expires.
Service controls
Account records are separated by verified sign-in ID. Saved connection secrets are encrypted. Photo links expire, generation is limited by credits, and deletion runs in batches. There is no special zero-retention promise for AI-provider logs. The full current behaviour is set out in the photo notice.
Questions, additional instructions or audit requests: sean@salonsgoonline.com.