Privacy Policy
Draft. To be reviewed before launch.
Who we are
PrettyNBrows is a brow studio in North Saint Paul, MN. Our online booking and client records run on a scheduling service operated for us by Belle Creata LLC on its own servers in the United States. This policy explains what we collect, why, and the choices you have.
What we collect
When you book: your name, mobile number, email address, the service and time you chose, and whether you agreed to the booking policy.
When you visit: appointment notes, products or shades used, and your appointment history.
If you fill in our intake form: your answers about allergies, skin conditions, pregnancy, recent treatments and past reactions, and your signature. These are health related details.
If we take photos of your results: the photos, and whether you agreed to their use in our marketing.
On our website and booking page: only the small amount of browser storage needed to keep your booking in progress. We do not use advertising trackers.
Health related information
You choose whether to give us health related details. We ask because they help us keep you safe, for example when we decide whether you need a patch test or whether a service is right for you. We use them only to provide your service, only authorized staff can see them, and they are not medical advice.
Why we use your information
To book and run your appointments, send your confirmation, keep a record of your service and consent, collect a deposit when one applies, answer your questions, and meet legal and accounting needs.
We do not sell your personal information.
Photos
Photos taken for your treatment record are used only for your service and your record. We use photos in our marketing, such as on this website or social media, only if you separately agree. You can say no and still receive every service. You can withdraw your permission at any time and we will stop using the photos from then on.
Who receives your information
Belle Creata LLC, which operates our scheduling service and the servers that hold your information. Cloudflare, which delivers our website and booking pages. Our payment provider, Stripe, when we collect a deposit: card details go directly to Stripe and are not stored by us. Our email provider, and later our text message provider, to send messages you agreed to receive. We share only what each needs to do its job. We may also share information when the law requires it.
Messages
We send your booking confirmation by email. We send appointment reminders, aftercare tips and rebooking nudges only if you agree when you book. Texts, when we offer them, will need your separate agreement. You can stop texts by replying STOP and emails by using the unsubscribe link or asking us. Message and data rates may apply to texts.
How long we keep it
We keep appointment, consent and treatment records for up to 3 years after your last visit, unless the law requires longer, and then delete or anonymize them. Photos you agreed to share are kept until you withdraw that permission. If you ask us to erase your information, we remove your personal details and keep only anonymous counts, such as how many appointments we had.
Your choices
You can ask to see the information we hold about you, correct it, download it, or erase it, and you can withdraw any permission you gave. Email PrettynBrows@gmail.com or call (612) 306-4696. We may ask you to confirm who you are first, and we aim to answer within 30 days. Some records we are required to keep.
Security
We protect your information with access controls, encryption for sensitive notes, secure connections, and backups, and we limit who can see client records. No system is perfectly secure. If a breach affects your information we will tell you as the law requires.
Children
Our services are for adults. A parent or guardian must book and consent for anyone under 18.
Changes
If we change this policy we will post the new version here and update the date.
Contact
PrettynBrows@gmail.com or (612) 306-4696.