Privacy Policy

 

 

Last updated: 11/01/2026

 

Microblading Brow Art (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

This policy applies to visitors to our website, clients, students and anyone who engages with our services.

 

 

 

1. Who We Are

 

 

Microblading Brow Art is a professional permanent makeup clinic and accredited training provider operating in Twickenham, Bristol and North Devon.

 

For the purposes of data protection law, Microblading Brow Art is the data controller.

 

 

 

2. Personal Data We Collect

 

 

We may collect and process the following personal data:

 

 

a) Personal identification data

 

 

• Name

• Email address

• Telephone number

• Date of birth (to confirm eligibility for treatment or training)

 

 

 

b) Appointment and enquiry data

 

 

• Information submitted via contact forms

• Booking enquiries and consultation details

 

 

 

c) Client and learner records

 

 

• Consultation forms

• Consent forms

• Training enrolment information

• Assessment and certification records (where applicable)

 

 

 

d) Technical data

 

 

• IP address

• Browser type and version

• Pages visited and time spent on the website

 

 

 

 

3. How We Collect Personal Data

 

 

We collect personal data when you:

 

• Complete a contact or enquiry form on our website

• Book a consultation, treatment or training course

• Communicate with us by email, phone or social media

• Enrol on a training programme

• Browse our website (via cookies)

 

 

 

 

4. How We Use Your Personal Data

 

 

We use personal data for the following purposes:

 

• To respond to enquiries and manage bookings

• To provide treatments and training services

• To maintain accurate client and learner records

• To meet legal, regulatory and insurance requirements

• To improve our website and services

• To communicate important information relating to your appointment or course

 

 

We only process personal data where we have a lawful basis to do so.

 

 

 

5. Lawful Basis for Processing

 

 

Under UK GDPR, the lawful bases we rely on include:

 

• Consent – where you have provided clear permission

• Contract – where processing is necessary to deliver a service

• Legal obligation – where records are required by law or regulation

• Legitimate interests – for business administration and service improvement

 

 

 

 

6. How We Store and Protect Your Data

 

 

We take appropriate technical and organisational measures to protect personal data, including:

 

• Secure digital storage systems

• Restricted access to sensitive information

• Secure handling of paper records

 

 

Personal data is retained only for as long as necessary to fulfil its purpose or meet legal requirements.

 

 

 

7. Sharing Your Personal Data

 

 

We do not sell or rent personal data to third parties.

 

We may share data where necessary with:

 

• Awarding organisations or regulators (for accredited training)

• Professional advisers or insurers

• IT and website service providers (e.g. Wix)

 

 

All third parties are required to handle data securely and lawfully.

 

 

 

8. Cookies

 

 

Our website uses cookies to improve user experience and analyse website traffic. Cookies do not collect information that directly identifies you.

 

You can control or disable cookies through your browser settings.

 

 

 

9. Your Data Protection Rights

 

 

Under UK GDPR, you have the right to:

 

• Access your personal data

• Request correction of inaccurate data

• Request erasure of your data (where applicable)

• Object to or restrict processing

• Request data portability

 

 

To exercise your rights, please contact us using the details below.

 

 

 

10. Data Retention

 

 

We retain personal data only for as long as necessary:

 

• Client and consultation records are retained in line with professional and insurance requirements

• Training records are retained in accordance with awarding body and regulatory requirements

 

 

 

 

11. Changes to This Privacy Policy

 

 

We may update this Privacy Policy from time to time. Any updates will be posted on this page, and the “last updated” date will be amended accordingly.

 

 

 

12. Contact Us

 

 

If you have any questions about this Privacy Policy or how your data is handled, please contact us via our website contact form.

 

If you believe your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).