Privacy notice
This is the United Kingdom version of this page; the French version is published for reference only.
Cosmetic advice, never medical advice: we will point you to a dermatologist if you need one. No affiliate links, no commissions.
Who is responsible for your data
The personal data collected on this site is handled by the company HK CO, a simplified joint-stock company (SAS), with share capital of €100, registered with the Annecy Trade and Companies Register (RCS Annecy) under number 106 938 061, VAT number FR81106938061, which publishes BelleRoutine (the “controller” for data protection purposes). Its details are in the legal notice.
To contact us about your data, write to contact@belleroutine.com or use the contact page.
What we collect, why, and on what legal basis
Each card below says what we collect, why we use it, the legal basis under the UK GDPR (your consent, the performance of a contract, or our legitimate interests) and how long we keep it. Where a card says “consent”, you can withdraw it at any time.
Your first name and your quiz answers are used only to personalise your routine. We ask for no telephone number and no postal address. The photo from the quiz is kept in the space linked to the email address you entered, as the starting point of your follow-up.
-
Email address
- Why
- To find your routine again, to send you advice and to tell you about news
- Legal basis
- Your consent, given by ticking the optional box on the email screen (never ticked in advance)
- Retention
- Until you unsubscribe
-
Answers to the skin quiz
- Why
- To build your routine (first name, skin type, concerns, budget…)
- Legal basis
- Your consent
- Retention
- 12 months without a subscription, then automatic deletion; kept for as long as your subscription exists
-
Your account (email, optional first name, date of last sign-in)
- Why
- To sign you in to your account and show your routine, your subscription and your follow-up there
- Legal basis
- Performance of the contract
- Retention
- For as long as your account exists; you can delete it at any time from your settings
-
Monthly and seasonal check-ins (how your skin feels, changes, reactions, new products, your answers to the seasonal questions)
- Why
- To update your routine every month and when a season starts; Sonia, your AI, uses them in your messages
- Legal basis
- Performance of the contract
- Retention
- 12 months without a subscription, then automatic deletion; kept for as long as your subscription exists
-
Messages with Sonia, our AI
- Why
- Data: your messages and the photos you attach. To answer your questions using your file (quiz profile, routine and its history, reactions you reported, products, checks, product trials, trips) and your follow-up photos; to let the team take over a conversation when needed; to check the quality of the answers
- Legal basis
- Performance of the contract
- Retention
- 90 days on a rolling basis, attached photos included, then automatic deletion; deleted with your account
-
Photos of your face (quiz and check-ins): required for the quiz, optional at check-in
- Why
- To analyse how your skin looks for your routine, then to follow how it changes; the quiz photo is the starting point. Your phone also measures how your under-eye area looks in the photo (figures only, never an image); these figures are kept with the photo
- Legal basis
- The service you ask for by adding your photo, and your consent (the box on the photo screen)
- Retention
- Kept in your space for as long as your subscription is active, then for up to 3 months after it ends; without a subscription, 6 months after the photo; then deleted automatically. You can delete one photo, or all of them, at any time from “My photos”. The observations about appearance drawn from a photo (area of the face and a short description) are kept with it and deleted with it
-
Photos of your products (optional)
- Why
- Our AI provider analyses them to recognise your products and compare them with your routine (keep, incompatible, unnecessary)
- Legal basis
- The service you ask for by sending your photos
- Retention
- Kept in your space with your routine; deleted with your account (or with your routine)
-
“Is it right for me?” (optional)
- Why
- Data: the product checked (brand, name, type, active ingredients) and the verdict. The photo of the product is analysed by our AI provider to recognise it and compare it with your routine; it is not kept
- Legal basis
- The service you ask for by sending your photo
- Retention
- 12 months, then automatic deletion; deleted with your account (or with your routine)
-
My shopping list
- Why
- Data: for each product of your routine, what you indicated (to buy, “I have it”, “Nearly finished”). To show you what is left to buy. Without a signed-in account, these choices stay in your browser and are not sent to us
- Legal basis
- The service you ask for
- Retention
- For as long as your account exists; deleted with it
-
Product trial notebook (subscribers, optional)
- Why
- Data: the product you are trying (name, brand), your news after 3, 7 and 14 days or when your skin reacts (effects chosen, how often you use it, what you add in a few words) and Sonia’s replies. This information can concern your health: you choose to give it. To advise you and give an opinion (keep, space out, stop), your news and the product name are sent to our artificial intelligence provider, based outside the European Union; a worrying reaction is spotted without artificial intelligence and points you to a professional
- Legal basis
- The service you ask for by starting a trial
- Retention
- 12 months after the start of the trial, then automatic deletion; deleted with your account
-
Your skin today and your skin journal (optional)
- Why
- Data: the state of your skin that you note yourself, morning or evening, and the optional word you add. This information can concern your health: you choose to note it, and you can write nothing. To adjust your routine of the day (fixed rules, no artificial intelligence), to show you your journal and your monthly summary; if you subscribe, a summary of your states over the last 30 days (never your free word) helps the follow-up AI answer you in your messages
- Legal basis
- The service you ask for by noting your skin
- Retention
- 13 months after the day noted, then automatic deletion; deleted with your account
-
Referral
- Why
- Data: the referral code of the person who invites, the email address of the friend invited and the state of the discount (pending, applied or refused). To grant the referral discounts
- Legal basis
- Performance of the contract (article 5 of the terms of sale)
- Retention
- For as long as your account exists, deleted with it; if the friend deletes their account, their email address is erased and the line is kept anonymously
-
Travel routine (subscribers)
- Why
- Data: the destination, the city and date of departure, the length of the trip and your answers (climate, luggage, activity, plane). To prepare your travel routine, generated by our artificial intelligence provider, based outside the European Union, from your routine and your skin profile (skin type, concerns, sun reaction, budget), and to send you the reminder the day before departure if you asked for it
- Legal basis
- The service you ask for
- Retention
- Up to 30 days after you return (without a departure date: 90 days after creation), then automatic deletion; deleted with your account
-
Check-in reminder
- Why
- One email a month for your check-in (you can turn it off in your settings)
- Legal basis
- Performance of the contract
- Retention
- For as long as your subscription is active and the reminder is on
-
Reminders (optional)
- Why
- Data: for each device where you turn them on, the address your browser provides for sending notifications and its encryption keys, and the times you chose (morning, evening). To send you a notification in the morning and in the evening, with no product name and no information about your health
- Legal basis
- Your consent, given by turning the reminders on (you can turn them off at any time in your settings)
- Retention
- Until you turn them off; deleted after 6 months without a send or after 5 failed sends, and with your account
-
Daily weather tip (optional)
- Why
- Data: your city, for the daily weather tip: its name and its rounded coordinates (to about 1 km; “Use my location” keeps only a position rounded to about ten kilometres, never your exact position). To give you a tip every day that fits the weather in your city, and to use it in your morning reminder if you turned it on. With follow-up, it also helps spot the arrival of a season (forecast for the next 3 days) so we can offer to adjust your routine
- Legal basis
- The service you ask for (you choose your city and can change it at any time)
- Retention
- Until you change it, and deleted with your account. The weather kept in memory for 7 days contains no personal data
-
Monthly summary (subscribers)
- Why
- Data: your photos, how you said you felt at the check-in, the changes to your routine and the number of your check-ins, checks, product photos and messages for the month. To show you each month what your follow-up has done, calculated from this data without artificial intelligence, and to email you on the 1st of the month (can be turned off with the check-in reminder); this email contains no photo and no check-in answer
- Legal basis
- Performance of the contract
- Retention
- Nothing more is kept: the summary is recalculated each time you look at it; only the months for which the email was sent are noted, deleted with your account
-
Subscription and payment
- Why
- To take payment for the full analysis and for the subscription. Stripe handles the payment; BelleRoutine never has access to your full card details
- Legal basis
- Performance of the contract, and our accounting obligations
- Retention
- Stripe keeps the invoices because of accounting obligations, even after your account is deleted
-
Log of team actions
- Why
- To keep a record of who did what on an account (looking at a file or a photo, giving a subscription, deletion…), without your answers or your photos
- Legal basis
- Legitimate interests (security)
- Retention
- Contains only technical identifiers, never an answer, an email address or a photo
-
Timestamp
- Why
- To filter automated submissions
- Legal basis
- Legitimate interests (security)
- Retention
- Not kept after processing
-
Fingerprint of the IP address
- Why
- To limit the number of quizzes launched, sign-in link requests, invitation link visits and city searches from the same connection (fighting abuse). The address itself is never recorded, only a fingerprint calculated from it (hashing)
- Legal basis
- Legitimate interests (security)
- Retention
- 48 hours at most, then automatic deletion
-
Journey on the site
- Why
- To understand where the journey gets stuck and improve it: pages viewed, steps completed, masked session recordings (details in the cookies section below)
- Legal basis
- Legitimate interests (improving the service)
- Retention
- 12 months for statistics, 30 days for recordings
-
Survey on features (once, optional)
- Why
- A short questionnaire to choose the next features. It contains no question about your skin or your health. Your answers are not linked to your address in our results: we only know that you answered. Each email has a link to stop receiving them
- Legal basis
- Legitimate interests (improving the service)
- Retention
- The questionnaire link is deleted 30 days after it expires, and the answers after 395 days
-
Photos of your face already kept, and the results of their analysis
- Why
- To check the quality of our analysis tools: for example, checking that face detection works well on real photos. Done by the BelleRoutine team only; the results carry neither your name nor your email address
- Legal basis
- Legitimate interests (quality of the service). You can object to this check by writing to us
- Retention
- No extra period: copies made for a check are deleted as soon as it is finished; the photos stay subject to the periods given above
Our AI and your data
The skin quiz is open: you fill in a questionnaire and add a front-facing photo of your face. An artificial intelligence specialised in skincare analyses this information to build your routine. This is how your data is used:
- Your photo is analysed by the AI, then kept in your space so that you can follow how your skin changes; you can delete it at any time. It is never published or logged.
- Photos of your products (optional) are different: they show your bottles, not your face. They are analysed by our AI provider to recognise your products, kept in your space with your routine and deleted with your account.
- The questionnaire and the routine obtained are kept so that you can find your result again. Without a subscription, they are deleted automatically after 12 months.
- The analysis is carried out by a third-party artificial intelligence provider, which receives the text of your questionnaire and your photo so that it can produce the analysis. This provider is based outside the European Union and is not named here. The list of our processors and where they are located is available on request at contact@belleroutine.com.
- At each check-in, your previous photo and the new one are sent to our artificial intelligence provider, based outside the European Union, to compare how your skin looks. That country may not offer a level of protection equivalent to the one in the United Kingdom. This transfer only happens if you add a photo.
Photo screen. Before the photo is used, the screen shows a notice and a box asking for your agreement to the analysis and to the photo being kept as described. The box is already ticked when the screen opens, and you can untick it. If you do, the photo is not sent, not analysed and not kept, and the quiz cannot be completed, because the routine needs the photo.
Who sees your photos. You and the BelleRoutine team (the publisher), to support you and to check the quality of the service. They are not published, not sold and not used for anything other than your follow-up and the quality checks of our analysis tools.
Messaging with Sonia, our AI. Sonia is an artificial intelligence, not a person. To answer you, your messages, your file (quiz profile, routine and its history, reactions you reported, products, checks, product trials, trips — never your email address) and, with each message, your starting photo and your most recent photo, as well as the photo you may attach to your message, are sent to our artificial intelligence provider, based outside the European Union (purpose: the personalised advice of your follow-up). Your messages are never published. The BelleRoutine team can read them to take over the conversation or to check the quality of the answers. Photos attached to your messages are kept 90 days with them, visible to you and to the BelleRoutine team, then deleted automatically. You can see what Sonia knows about you in your space (“What Sonia knows about you”).
Travel routine. Your destination, your dates, your answers and your routine (products, skin type, concerns, sun reaction, budget) are sent to our artificial intelligence provider, based outside the European Union, to prepare your kit (never a photo, never your answers about your health).
The use of your data for the analysis rests on your consent. You keep all the rights described below. If you do not want this analysis, simply do not start the quiz.
Who else sees your data
- Cloudflare hosts the site and technically handles the sending of forms. Connection logs are kept according to Cloudflare’s own policy.
- Cloudflare also keeps the photos of your face (quiz and check-ins) and of your products, in private storage located in the European Union, never reachable by a public address.
- Resend sends our emails: sign-in link, routine, check-in reminder, reminder for your travel routine, and the sign-up message to our mailbox.
- Your browser’s notification service (Google, Mozilla, Apple or Microsoft) delivers your reminders if you turn them on. The message is encrypted: this service cannot read it.
- Open-Meteo (Switzerland) provides the weather of your city for the daily tip and the 3-day forecast that announces a new season. It only receives rounded coordinates, or the city name you type: never your identity, your email address or your IP address (the request leaves from our servers).
- Stripe handles the payment for the full analysis and the subscription; BelleRoutine never has access to your full card details. Stripe keeps the invoices because of accounting obligations, even after your account is deleted.
- PostHog (European Union) measures the journey and records sessions, within the limits described in the cookies section.
- TikTok (Ireland, transfers outside the EU possible) only receives data as described in the cookies section: page views, the end of the quiz and, only after you click “Accept”, a hashed email address.
- GitHub (United States) keeps a backup copy of our database, made every week in a private space so that we can repair an error or an outage: account, answers, routines and check-ins, with no photo at all. Each copy is deleted after 30 days at most.
- Our artificial intelligence provider, based outside the European Union and not named here, as described in the section on our AI.
- The BelleRoutine team, to support you and to check the quality of the service.
Your email address is neither sold nor rented. It is used only for the messages announced and, only if you click “Accept”, for measuring our TikTok ads, in hashed form.
Transfers outside the United Kingdom
Some of the providers listed above are located outside the United Kingdom and the European Economic Area: for example Cloudflare, Inc. and GitHub (United States), and our artificial intelligence provider, based outside the European Union.
TikTok’s data may also be transferred outside the European Union and the United Kingdom.
For these transfers we rely on a safeguard provided by UK law, such as UK adequacy regulations (for the United States, the UK Extension to the EU–US Data Privacy Framework, for certified companies), the International Data Transfer Agreement, or the UK Addendum to the European Commission’s standard contractual clauses. Some of these countries may not offer a level of protection equivalent to the one in the United Kingdom.
To know which safeguard applies to a given provider, write to contact@belleroutine.com.
How long we keep your data
The detail is in the cards above. In short:
- Photos of your face: for as long as your subscription is active, then up to 3 months after it ends; without a subscription, 6 months after the photo; then deleted automatically. You can delete them yourself at any time.
- Messages with Sonia and the photos attached to them: 90 days on a rolling basis.
- Quiz answers and routine without a subscription: 12 months; with a subscription, as long as the subscription exists.
- Skin journal: 13 months after the day noted.
- Product trials: 12 months after the start of the trial.
- Site statistics: 12 months; session recordings: 30 days; fingerprint of the IP address: 48 hours at most.
- Account: until you delete it. Backup copies disappear after 30 days at most. Stripe keeps the invoices because of accounting obligations.
Your rights
You can at any time ask for access to your data, for it to be corrected or erased, for its use to be restricted, or to receive the data you gave us in a portable format. You can object to a use that rests on our legitimate interests, and withdraw your consent at any time: withdrawing is as easy as giving it. Write to the address on the contact page; we reply within one month.
From your settings (“My settings”) you can also do it yourself, at any time: download your data under “My data” (a JSON file: account, answers, routines, check-ins, list of your photos), delete your photos (also one by one from “My photos”), and delete your account — everything is then erased (backup copies disappear within 30 days at most); if your subscription is active, it is cancelled first. Stripe only keeps the invoices.
Special category data and your photo
Some of the information you give us can reveal something about your health: for example answers about your situation (such as pregnancy, or whether you follow a plan from a dermatologist or take a medicine at the moment), signs you point out on your skin, and your photo. The UK GDPR calls this special category data.
We use it only to build your routine and, when a signal calls for it, to point you to a professional instead of offering a routine. The legal basis is your explicit consent, which you give by choosing to answer those questions or to add your photo; you can withdraw it at any time by deleting your photos or your account from your settings, or by writing to us.
Your answers and your photo are never used for advertising: the advertising measurement never receives them, and the session recordings exclude these screens and the photo area. We do not use your photo to identify you.
Children
BelleRoutine is meant for adults. We do not knowingly collect data from children under 13, the age from which a child can consent to an online service in the United Kingdom. If you think a child has given us data, write to contact@belleroutine.com and we will delete it.
Complaints
The rules that apply are the UK GDPR and the Data Protection Act 2018. If our reply does not satisfy you, you can complain to the Information Commissioner’s Office, the UK data protection authority (ico.org.uk).
Last updated: 29 October 2026.