Lisa’s Brows is committed to protecting your privacy and handling your personal data responsibly, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We may collect and process the following personal data when you visit our website, contact us, or book a treatment:
- Full name
- Email address
- Phone number
- Medical information relevant to your treatment
- Payment information (e.g. for deposits or purchases)
- Browsing data (via cookies – see Cookies Policy)
We only process your data when we have a lawful reason, including:
- Your consent
- To fulfil a contract (e.g. to provide a booked treatment)
- Legal obligations (e.g. tax or insurance requirements)
- Our legitimate interests (e.g. providing and improving services)
Your data is used to:
- Manage and confirm appointments via Fresha
- Send reminders, confirmations, and follow-up communications
- Maintain treatment records
- Process payments via Monzo Business and SumUp
- Comply with legal, tax, and insurance obligations
- Improve customer experience and website functionality
Your personal information is treated confidentially. It may be shared with trusted third parties, only where necessary:
- Fresha – for appointment booking and reminders
- Monzo Business – for business banking transactions
- SumUp – for secure card payment processing
- Accountants or legal advisors (for compliance purposes)
- Authorities if legally required (e.g. for insurance or health reasons)
We do not sell or rent your personal data to anyone.
We retain client records for up to 7 years in line with industry and insurance standards. After that period, your data will be securely deleted.
You have the right to:
- Access your personal data
- Request correction or deletion of your data
- Object to or restrict processing
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise these rights, please email us at lisabrows1@gmail.com
We take appropriate security measures to protect your data, including secure digital storage, password protection, and restricted access.
This Privacy Policy may be updated at any time. The latest version will always be published on our website.