Privacy policy

To contact you: your name, email address and phone number. I also ask you to confirm you're 18 or over, because my treatments are for over-18s only.

To keep you safe: any health conditions, medications, allergies or recent procedures you tell me about, whether you're pregnant or breastfeeding, whether you've had cold sores, and whether you've had semi-permanent makeup or filler before. This is health information, and the law treats it as more sensitive than the rest — I ask for it only because some conditions make a treatment unsafe or change how it heals.

To plan your treatment: photographs of your natural brows or lips, and any inspiration photos you send. I may take before-and-after photos at your appointment.

If you book: your appointment details and a record of what you paid. If you sign in to see your appointments, I also hold the email address you sign in with. Card details are handled entirely by Stripe — they never reach me, and I never see your full card number.

For your contact and appointment details, because I need them to provide the service you've asked me for.

For your health information, because you've explicitly consented by sending me the enquiry form. You can withdraw that consent at any time — though if you do before your appointment, I won't be able to treat you safely, so I'd have to cancel it.

For treatment records and photographs of work I've done, because I have a legitimate interest in keeping a record of the treatments I've carried out, and because my insurer expects it.

Nobody sees your information for their own purposes. It sits in services I use to run the studio: Google Firebase stores the enquiry and your photos, Resend sends the emails, Stripe processes payments, and Apple's iCloud Calendar holds your appointment (the time, your name and your phone number) so it shows in the calendar on my phone. Each of them only handles what they need to, and none of them may use your information for anything else.

I don't sell your information, and I don't share it for advertising.

If you enquire and don't book, I delete your enquiry and photos after 12 months.

If you become a client, I keep your treatment record and before-and-after photos for seven years after your last appointment. That length isn't arbitrary — it's the window in which a claim could be brought, and my insurer expects me to be able to show what was done and what you told me at the time.

If you join my mailing list I keep your email until you unsubscribe.

You can ask to see everything I hold about you, correct anything wrong, delete it, or have it sent to you in a portable format. You can object to how I'm using it, or ask me to pause. Just message or email me — there's no form to fill in and it costs you nothing. I'll respond within one month.

The one thing I can't always do is delete a treatment record straight away, for the insurance reason above. If that comes up I'll explain it to you rather than just refuse.