Privacy Policy

Last Updated: 9 May 2026

At YLG Salon Chennai, your privacy is important to us. This Privacy Policy explains how LS ENTREPRISES ("we," "our," or "us"), the operator of YLG Salons in Chennai, collects, uses, shares, and protects your personal information when you interact with our website (ylgchennai.in), book appointments, or engage with us via WhatsApp, email, or in person.

By using our website or services, you consent to the practices described in this policy. If you disagree with any part of this policy, please refrain from using our website or services and contact us to discuss your concerns.

1. Who We Are

LS ENTREPRISES is the authorised Master Franchisee for YLG Salons in Chennai, Tamil Nadu, India. We operate the following salon locations:

• YLG Salon Adyar
• YLG Salon Anna Nagar
• YLG Salon Porur

For the purposes of data protection, LS ENTREPRISES is the data controller responsible for personal data collected through this website and our salon operations. The YLG brand is owned by R&R Salons Pvt Ltd, which may also independently collect data under its own privacy terms for brand-level services.

2. Information We Collect

2.1 Information You Provide Directly

When you book an appointment, fill out a contact form, subscribe to our newsletter, or communicate with us, we may collect:

• Name — to personalise your appointment and communications
• Phone Number — to confirm bookings and send WhatsApp reminders
• Email Address — for booking confirmations, receipts, and marketing (with consent)
• Preferred Services — to personalise your experience and recommend relevant treatments
• Appointment History — to provide continuity of care across visits
• Health Information (if disclosed) — skin/hair conditions, allergies, or sensitivities shared for the purpose of safe service delivery

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical data:

• IP Address — for security and analytics
• Browser & Device Type — to optimise your website experience
• Pages Visited & Session Duration — to understand how visitors use our site
• Referral Source — to understand where visitors come from (Google, Instagram, etc.)
• Cookies & Tracking Pixels — as described in Section 7 below
• UTM Parameters — to attribute marketing campaigns accurately

2.3 Information from Third Parties

We may receive information about you from third-party platforms such as Google Ads, Meta (Facebook/Instagram), and our CRM system (Zylu) when you interact with our advertisements or booking systems. This may include form completions, ad clicks, and conversion events.

3. How We Use Your Information

We use your personal information for the following purposes:

• Appointment Management: Booking, confirming, rescheduling, and sending reminders for appointments via phone, WhatsApp, or email
• Service Personalisation: Understanding your preferences to recommend appropriate services, products, and stylists
• Customer Support: Responding to queries, complaints, or feedback you submit through any channel
• Marketing Communications: Sending promotional offers, seasonal deals, and beauty tips via WhatsApp, email, or SMS — only with your consent and only to the extent permitted by law
• Analytics & Improvement: Analysing website traffic and user behaviour to improve our services and website performance
• Advertising: Running targeted advertisements on Google and Meta platforms using anonymised or hashed audience data
• Legal & Compliance: Meeting our legal obligations, resolving disputes, and enforcing our terms
• Safety: Verifying health disclosures to ensure treatments are administered safely

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: To fulfil our obligations when you book an appointment or purchase a service
• Legitimate Interests: For analytics, fraud prevention, and improving our operations, where these interests are not overridden by your rights
• Consent: For marketing communications, cookies, and retargeting — which you may withdraw at any time
• Legal Obligation: To comply with applicable Indian laws, tax regulations, and regulatory requirements

4A. Digital Personal Data Protection Act, 2023 (India)

LS ENTREPRISES is a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). This section explains your rights as a Data Principal and how we process your personal data in compliance with the Act.

4A.1 Lawful Basis & Notice

We process your personal data on the basis of your consent (for marketing communications and optional features) or for the specified legitimate uses listed under Section 7 of the DPDP Act (such as fulfilling your booking, responding to medical emergencies, or complying with legal obligations). Before collecting your data, we provide notice of:

• The personal data we are collecting and the specific purpose
• The manner in which you may exercise your rights under the Act
• The manner in which you may file a complaint with the Data Protection Board of India

4A.2 Your Rights as a Data Principal

Under the DPDP Act you have the following rights, exercisable by writing to our Grievance Officer (see Section 4A.6):

• Right to Information: A summary of the personal data of yours we are processing and the processing activities undertaken
• Right to Correction & Erasure: Correction of inaccurate data and erasure when no longer needed for the original purpose, subject to legal retention requirements
• Right of Grievance Redressal: A readily available means to register grievances; we will respond within 30 days
• Right to Nominate: You may nominate any other individual to exercise these rights on your behalf in the event of your death or incapacity
• Right to Withdraw Consent: You may withdraw consent at any time; the consequence of withdrawal is that we will stop processing your data for the consented purpose, but lawful processing already done remains valid

4A.3 Consent & Withdrawal

Where we rely on consent (e.g., for marketing communications, optional analytics, or sharing data with advertising platforms such as Meta and Google), our consent request is presented in clear, plain language alongside the option to access this Privacy Policy. Consent checkboxes default to UNCHECKED — we do not pre-tick any consent. You may withdraw consent by:

• Replying STOP or UNSUBSCRIBE to any WhatsApp or SMS message we send
• Emailing director@lsentreprises.in with the subject "Withdraw Marketing Consent"
• Asking the manager at any of our three salon locations to mark your record as opted-out

Once consent is withdrawn, we will cease the consented processing within 30 days and add your phone number / email to a permanent suppression list, even when refreshing audience data with our advertising platforms.

4A.4 Children's Data

The DPDP Act 2023 prohibits us from processing the personal data of any child (under 18 years) without verifiable parental or lawful guardian consent, and prohibits behavioural monitoring or targeted advertising directed at children. Our website and marketing communications are intended for adults (18+) only. For salon services provided to minors aged 13–18, we require physical presence or written consent from a parent or lawful guardian at the time of the visit, and we do not store the minor's data for marketing purposes.

4A.5 Cross-Border Data Transfers

Some of our processors (Google, Meta, HubSpot, Microsoft Clarity) operate servers outside India. We transfer your personal data to such processors in compliance with the DPDP Act, in particular Section 16 (transfers to countries the Central Government has not specifically restricted by notification). We send only hashed (SHA-256) phone numbers and email addresses to advertising platforms — never plain-text — for the purpose of measurement and audience matching. Where future Government notifications restrict transfers, we will comply within the prescribed transition window.

4A.6 Grievance Officer

For any DPDP-related grievance, request, or concern, you may contact our designated Grievance Officer:

• Name: Venkatesh Sekar, Director — LS ENTREPRISES
• Email: director@lsentreprises.in
• Phone: +91 75501 96111
• Response Window: Within 30 days of receiving the grievance

If your grievance is not satisfactorily resolved, you have the right to approach the Data Protection Board of India once it is constituted by the Central Government under the DPDP Act.

5. How We Share Your Information

We do not sell your personal information to third parties. We may share your data only in the following circumstances:

• Service Providers: Trusted third-party tools and platforms that help us operate our business, including Zylu (CRM and booking system), HubSpot (CRM and lead management), Google (Analytics and Ads), Meta (Facebook and Instagram Ads), and email/messaging service providers. These processors are contractually obligated to protect your data.
• R&R Salons Pvt Ltd: The YLG brand owner may receive aggregated or anonymised operational data for brand-level reporting. We do not share individual customer data with them for marketing purposes without your explicit consent.
• Legal Requirements: When required by law, court order, or government authority in India
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, your data may be transferred to the new entity, subject to the same privacy protections

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.

• Booking & Appointment Data: Retained for 3 years from your last visit, to allow continuity of service and resolve any disputes
• Marketing Communication Records: Retained until you opt out, after which we maintain a suppression record to honour your opt-out
• Website Analytics Data: Retained in aggregated or anonymised form for up to 26 months via Google Analytics (standard retention setting)
• Financial & Transaction Records: Retained for 7 years as required under Indian tax and accounting law
• Health & Sensitivity Data: Retained only for the duration of your active client relationship and deleted within 12 months of your last appointment

7. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and to support our marketing and analytics functions.

Types of Cookies We Use

• Strictly Necessary: Required for the website to function correctly (e.g., session management, form submissions). Cannot be disabled.
• Analytics Cookies: Set by Google Analytics and Google Tag Manager to measure how visitors use our site. Data is aggregated and anonymised.
• Marketing & Advertising Cookies: Set by Meta Pixel and Google Ads to track conversions from our advertising campaigns and to serve you relevant ads on social media and Google. This includes the use of Enhanced Conversions (hashed email/phone data).
• Functional Cookies: Used to remember your preferences, such as your preferred salon location or service category.

You can control cookie settings through your browser. However, disabling certain cookies may affect the functionality of the website. Our use of Enhanced Conversions technology involves sending hashed (not plain-text) data to Google for improved attribution — no raw personal data is transmitted to Google's servers.

8. WhatsApp & SMS Communications

We use WhatsApp Business API (via a registered WABA number) to send appointment reminders, booking confirmations, and promotional offers. By providing your phone number through any booking or inquiry form, you provide consent to receive these messages.

8.1 AI-Powered Virtual Assistant

When you send a message to our WhatsApp number, your inquiry may be handled by an AI-powered virtual assistant named Maya. Maya is designed to answer common questions about services, pricing, and availability, and to help you book appointments.

• Your message content is processed automatically to generate a relevant response.
• Conversations may be temporarily stored (for up to 24 hours) to maintain context within a single session. They are not used to train AI models.
• If Maya cannot answer your question or you request a human, the conversation is escalated to our salon team.
• To speak with a human at any time, simply reply "Manager" or "Human" in the chat.

The AI system is operated by LS ENTREPRISES using a third-party language model provider. No personal data from your WhatsApp conversations is sold or shared with advertisers.

8.2 Opt-Out & Message Frequency

You can opt out of WhatsApp marketing messages at any time by replying "STOP" or "UNSUBSCRIBE" to any message we send. Transactional messages (e.g., booking confirmations, reminders for appointments you have scheduled) cannot be disabled as they are essential to service delivery.

Message frequency may vary based on your activity. Standard data rates may apply depending on your mobile carrier.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• HTTPS encryption on all pages of this website
• Access controls limiting who within our team can view customer data
• Use of trusted, security-audited third-party platforms for data storage and CRM
• Hashing of sensitive data (such as phone numbers and emails) before transmission to advertising platforms
• Regular review of data access permissions and third-party integrations

No method of data transmission or storage over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights or privacy, we will notify you as required by applicable law.

10. Your Rights

You have the following rights with respect to your personal data. To exercise any of these rights, please contact us using the details in Section 13.

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct inaccurate or incomplete personal data.
• Right to Erasure: You may request that we delete your personal data where there is no legitimate reason for us to continue holding it. Note that certain data may need to be retained for legal or contractual obligations.
• Right to Object: You may object to our processing of your personal data for marketing purposes at any time.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: You may request a copy of your data in a commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

We will respond to all requests within 30 days. If we are unable to fulfil your request, we will explain why. We will not charge a fee for reasonable requests.

11. Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete it from our records.

For clients between 13 and 18 years of age receiving salon services, we require the presence or explicit consent of a parent or guardian for certain treatments.

12. International Data Transfers

Some of our third-party service providers (e.g., Google, Meta/Facebook) are located outside India and may process your data on servers in other countries. When your data is transferred internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses or reliance on the privacy frameworks of those providers.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes constitutes acceptance of the updated policy.

14. Data Deletion Requests

You have the right to request deletion of your personal data held by LS ENTREPRISES at any time. This includes your contact details, booking history, WhatsApp conversation records, and any marketing preferences we hold.

How to Request Deletion

You can submit a data deletion request through any of the following channels:

• Email: Send your request to director@lsentreprises.in with the subject line "Data Deletion Request" and include your name and phone number so we can locate your records.
• WhatsApp: Message our salon number and type "Delete my data" — our team will contact you to verify and process the request.
• In Person: Visit any of our three salon locations and speak with the manager.

Processing Timeline & Exceptions

We will process verified deletion requests within 30 days and confirm by email or WhatsApp once complete. Note that certain data may need to be retained despite your request where we have a legal obligation to do so (e.g., financial transaction records required under Indian tax law for 7 years, or records needed to resolve an active dispute).

If you connected with us via Meta platforms (Facebook/Instagram/WhatsApp), you may also request deletion of data held by Meta directly through their Facebook Data Deletion Request form.