Your Information
Privacy Policy
Your privacy matters to us. This policy explains how Lash & Brow Lab collects, uses, shares, and protects information when you visit our website, request an appointment, participate in our rewards program, or communicate with The Lab.
Effective date: [EFFECTIVE DATE]
Home›Privacy Policy
Contents
1. Information We Collect
Lash & Brow Lab may collect information that clients provide directly through our website, booking forms, and communications. The information we may collect includes:
- —Full name
- —Phone number
- —Email address
- —Instagram handle, when voluntarily provided
- —Preferred service
- —Preferred appointment date and time
- —New or returning client status
- —Messages and desired-result information
- —Booking and appointment history
- —Deposit and payment status
- —Loyalty Rewards activity
- —Referral information
- —Communications with the business
- —Client photographs and consent preferences
- —Service preparation or sensitivity information voluntarily provided
Please do not submit unnecessary medical, financial, or highly sensitive personal information through general website forms.
2. Appointment & Payment Information
Appointments, deposits, and payments may be processed through Square or another approved booking and payment provider. Lash & Brow Lab may receive booking details, payment status, transaction identifiers, and limited payment information necessary to manage the appointment.
Complete payment-card information is processed by the payment provider and should not be stored directly by the Lash & Brow Lab website unless the implemented payment system specifically requires and secures it.
For more information, please review the privacy policies of the booking and payment providers that process your transaction. Links to applicable third-party policies are available upon request.
3. Information Collected Automatically
When you visit our website, certain information may be collected automatically. Depending on the analytics, hosting, and advertising tools enabled, this may include:
- —IP address
- —Browser and device type
- —Operating system
- —Referring page
- —Pages visited
- —Date and time of visits
- —Approximate geographic area
- —Interaction with buttons and booking links
- —Cookie identifiers
- —Advertising or campaign attribution data
The exact information collected depends on which analytics, hosting, and advertising tools are currently active. For details about the tools in use, please contact us.
4. How Information Is Used
Information we collect may be used to:
- —Respond to inquiries
- —Review and confirm appointment requests
- —Process deposits and payments
- —Send confirmations, reminders, preparation instructions, and aftercare
- —Manage cancellations and rescheduling
- —Maintain Loyalty Rewards progress
- —Process referral rewards
- —Provide customer support
- —Manage approved client photographs
- —Improve the website and booking experience
- —Measure website and marketing performance
- —Prevent fraud, abuse, or unauthorized activity
- —Maintain business records
- —Comply with applicable legal obligations
- —Send promotional communications when appropriate consent exists
Submitted client photographs and personal information are not used to train artificial intelligence systems unless separate, explicit consent has been obtained.
5. Text & Email Communications
Clients may receive transactional messages related to appointment requests, confirmations, deposits, reminders, changes, preparation, aftercare, and customer support. These messages are directly related to your appointment or inquiry and are not promotional in nature.
Message and data rates may apply. Message frequency may vary.
Transactional appointment messages are distinct from optional marketing communications.
For promotional messages, we:
- —Obtain appropriate consent before sending
- —Clearly identify promotional communications
- —Provide a functional opt-out method
- —Honor opt-out requests
- —Do not make consent to marketing a condition of receiving an unrelated service unless legally permitted
6. Loyalty Rewards
In connection with the Loyalty Rewards program, the business may process:
- —Client identity and contact details
- —Completed eligible visits
- —Earned and redeemed rewards
- —Referral rewards
- —Reward adjustments
- —Applicable expiration information, only if later approved
Loyalty information should be associated with the client information used during booking.
7. Referral Information
When a client submits information about a friend, the information should be used only to process the referral, communicate about the invitation when permitted, and administer any eligible reward.
By submitting a referral, the referring client confirms that they have permission to provide the referred person's contact information for this purpose. Referred individuals are not added to general marketing lists without their own consent.
We also offer a referral-link option that allows you to share a link directly without entering another person's contact information.
8. Client Photographs & Results
Client photographs are collected and published only with documented permission. Consent options distinguish between:
- —Website use
- —Social media use
- —Advertising use
- —Internal portfolio use
- —Before-and-after use
- —First name, initials, or anonymous display
Clients may ask questions about consent or request removal of a published photograph at any time. Removing a public image does not necessarily require deleting records that must be retained for legitimate business or legal purposes.
We do not publish the following by default:
- —Full client names
- —Contact information
- —Private appointment notes
- —Health information
- —Exact appointment dates
- —Images without confirmed consent
10. How Information May Be Shared
Information may be shared with service providers needed to operate the business, including:
- —Website hosting providers
- —Booking and payment processors
- —Email and SMS providers
- —Loyalty Rewards platforms
- —Analytics providers
- —Advertising platforms
- —Website maintenance providers
- —Professional advisors
- —Government or legal authorities when legally required
Service providers should receive only the information reasonably necessary to perform their assigned function.
Active Service Providers
The following providers may process data in connection with our website and services. Links to their privacy policies are included where applicable.
- —Square — booking and payment processing
- —Landingsite — website hosting and form processing
- —Google Analytics — website analytics (when enabled)
This list is subject to change as our service provider relationships evolve.
11. Sale & Targeted Advertising
This section discloses whether Lash & Brow Lab engages in the following practices. The statements below should be reviewed and confirmed by the business before publication.
When required by applicable law, the following controls are provided:
- —"Do Not Sell or Share My Personal Information" opt-out
- —Advertising opt-out controls
- —Browser-based opt-out signal handling
- —A privacy request form (see Section 14)
12. Data Retention
Information is retained only for as long as reasonably necessary for appointments, payments, rewards, customer service, recordkeeping, dispute prevention, security, and applicable legal obligations.
An internal retention schedule applies to the following categories:
- —Booking requests
- —Completed appointments
- —Payment records
- —Referral submissions
- —Loyalty records
- —Contact inquiries
- —Marketing consent
- —Client photographs and releases
- —Website analytics
- —Privacy requests
Specific retention periods are established internally and are not published until approved by the business.
13. Data Security
Lash & Brow Lab uses reasonable administrative, technical, and organizational measures designed to protect personal information. However, no website, transmission, or storage system can guarantee absolute security.
We do not claim military-grade security, complete protection, guaranteed encryption, HIPAA compliance, or PCI compliance on behalf of Lash & Brow Lab unless each specific certification has been independently verified and confirmed.
14. Privacy Choices & Requests
Where applicable, you may submit a request to exercise the following rights regarding your personal information:
- —Access to information
- —Correction
- —Deletion
- —A copy of information
- —Withdrawal of marketing consent
- —Removal of an approved photograph
- —Advertising preference changes
- —Information about data practices
Available rights and response requirements may vary depending on applicable law and the nature of the request.
15. Florida Privacy Notice
Some Florida residents may have rights under applicable Florida privacy laws when those laws apply to the business and the processing activity at issue. Whether a specific law applies depends on factors including the size of the business, the volume of data processed, and the nature of the processing activity.
This section has not been reviewed for applicability of the Florida Digital Bill of Rights or other Florida privacy statutes. It should be reviewed by qualified legal counsel before any claims of coverage, exemption, or compliance are made.
If applicable, the process for exercising rights includes:
- —Submitting a request using the form in Section 14
- —Identity verification before processing
- —Receiving a response within the time required by law
- —Appealing a denied request when that right is available
- —Opting out of covered processing where applicable
16. Children's Privacy
The website and services are not directed to children under 13, and Lash & Brow Lab does not knowingly collect personal information from children under 13 through the website.
If you believe a child has submitted personal information, contact us so the matter can be reviewed.
17. Third-Party Links
The website may link to Square, Instagram, messaging services, and other third-party platforms. Their privacy practices are governed by their own policies. We encourage you to review the privacy policy of any third-party service before providing your information.
18. Policy Updates
We may update this Privacy Policy when our services, technology, providers, or legal obligations change. The updated version will display a revised effective date. We encourage you to review this policy periodically.
19. Contact
For questions about this policy or to submit a privacy request, contact:
Lash & Brow Lab
Privacy email: [PRIVACY EMAIL]
Phone: [BUSINESS PHONE]
Mailing address: [PUBLIC MAILING ADDRESS OR REGISTERED AGENT ADDRESS]
Submit a Privacy Request
Use the privacy request form above to exercise your rights, ask a question about this policy, or request changes to how your information is handled.
This privacy policy contains editable placeholders and should be reviewed by qualified legal counsel before publication. Unverified legal claims, certifications, and compliance statements should not be made without independent confirmation.
Last updated: [LAST UPDATED DATE]