Privacy Policy

Effective Date: 12/02/2025

At Bomb Lashes and Brows, we value your trust and are committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant privacy legislation. This Privacy Policy outlines the types of information we collect, how we use it, how it is stored, and your rights regarding your personal data.

1. Introduction

This Privacy Policy applies to all individuals who engage with Bomb Lashes and Brows, whether in person at our salon, through our website, or via any other communication channels including email, phone, or social media. By accessing our services or providing us with your information, you acknowledge that you have read and understood this policy.

2. Information We Collect

In the course of providing professional hair and beauty services, we may collect personal information from you. This includes, but is not limited to, your full name, phone number, email address, and postal address. If you book an appointment online or through a third-party system, additional data such as appointment history, service preferences, and payment information may also be collected.

For some treatments, we may ask for information regarding allergies, medical conditions, or sensitivities to ensure your safety and tailor our services appropriately. This information is considered sensitive and is treated with the highest level of confidentiality.

We may also collect data indirectly through your interaction with our website, such as IP address, browser type, and usage behavior, through the use of cookies or similar technologies. This data helps us analyze performance and improve the user experience.

3. How Your Data Is Used

Your personal data is used exclusively for legitimate business purposes in accordance with the services we provide. This includes confirming and managing appointments, communicating with you about your bookings, providing personalized service recommendations, processing payments, and responding to inquiries.

In addition, if you have consented, we may use your contact details to send you updates, newsletters, offers, or marketing materials related to our salon. You can opt out of receiving marketing communications at any time.

We may also use your information for internal administrative purposes such as record-keeping, staff training, service improvement, and compliance with legal obligations.

4. Data Sharing and Disclosure

[Salon Name] does not sell, rent, or trade your personal data to third parties. However, we may share your data with trusted service providers who assist us in operating our business—such as booking software providers, email marketing platforms, payment processors, and website hosts. These third parties only receive data necessary to perform their specific functions and are contractually obligated to maintain its confidentiality and security.

We may also disclose personal information if required by law, in response to legal requests by public authorities, or to protect the rights and safety of [Salon Name], our clients, or the public.

5. Data Retention and Security

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the nature of your relationship with us.

All data is stored securely, whether in digital format (on protected servers and cloud-based systems) or in physical form (in locked storage accessible only to authorized staff). We implement technical and organizational safeguards, such as access restrictions, password protections, and data encryption, to prevent unauthorized access, loss, or misuse of your data.

6. Your Rights

You have a number of rights concerning your personal data under GDPR and other applicable laws. These include:

The right to access the personal data we hold about you.
The right to correct or update any inaccuracies in your data.
The right to request the deletion of your data, unless we are legally required to retain it.
The right to object to or restrict certain types of data processing.
The right to withdraw your consent at any time where processing is based on your consent.
The right to data portability, allowing you to obtain and reuse your data across other services.

To exercise any of these rights, please contact us using the contact details provided at the end of this policy. We may require proof of identity before processing your request.

7. Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance user experience, analyze traffic, and support site functionality. Cookies are small text files stored on your device when you visit our site. You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect site functionality.

We may also use third-party analytics tools, such as Google Analytics, to gather aggregated data about website usage. This information helps us understand how visitors interact with our site and allows us to improve our digital presence.

8. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make updates, we will revise the "Effective Date" at the top of the policy. We recommend reviewing this page periodically to stay informed about how we are protecting your data.