Privacy policy
What we collect, why we collect it and the rights you have over your data.
We respect your privacy. This policy explains what personal data The Ffrench Lash collects, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.
Last updated 17 October 2026
01Who we are
The Ffrench Lash is a private, appointment-only lash studio. We are the data controller for the personal data described in this policy, which means we decide how and why it is used.
The Ffrench Lash, 659 Fulham Road, London SW6 5PY. Email: studio@theffrenchlash.com. Instagram: @theffrenchlash.
02What we collect
Depending on how you deal with us, we may collect:
- Your name, email address and phone number, when you book or send us an enquiry.
- Booking details: the sets and services you book, appointment times and your visit history.
- A clear photo of your natural lashes, which we ask for before a first appointment so your design is ready.
- Notes from your consultation, such as your eye shape, your natural lashes and the look you want.
- Anything you choose to tell us about allergies, skin sensitivities or your health that is relevant to your treatment.
- Payment details for deposits and appointments. Card payments are handled by Square, and we do not store your full card number.
- Messages you send us by email or Instagram, and your marketing preferences if you give them.
03How we collect it
- Directly from you, when you book online, email us, use the enquiry form or message us.
- Through our online booking system, which is provided by Square.
- Through the website itself. See our Cookie Policy for what the site and the services on it store on your device.
04Why we use it
We only use your data where we have a lawful reason under the UK GDPR:
- To carry out your booking and deliver your treatment (contract).
- To keep you safe, for example by checking relevant allergies or sensitivities (legitimate interests, and consent for health information).
- To take payments, keep accounts and meet legal duties (legal obligation).
- To reply to your enquiries and look after our clients (legitimate interests).
- To send you news or offers, only if you have agreed to it. You can say stop at any time.
05Photos and social media
We only share photos or video of your lashes publicly, for example in our portfolio or on Instagram and TikTok, if you have agreed to it. You can ask us to take something down at any time and we will remove it.
06Who we share it with
We do not sell your data. We share it only with the people who help us run the studio, and only what they need:
- Square, for online booking and payments.
- Our website host and the company that built and maintains this website, 160 Digital.
- Our email provider and our accountant or bookkeeper.
- The authorities, where the law requires it.
07Where your data goes
Some of these providers are based outside the UK. Where that happens we make sure your data is protected by approved safeguards, as required by UK data protection law.
08How long we keep it
We keep client records, including consultation notes and booking history, for as long as you are a client and for a reasonable period afterwards, and keep financial records for the period the law requires. Enquiries that do not become bookings are deleted after a reasonable time. You can ask us to delete your data sooner, and we will unless we are legally required to keep it.
09Security
We take sensible steps to keep your data safe, including using trusted providers and limiting who can see client records. No system is completely secure, so please do not send us sensitive information by email unless you need to.
10Your rights
You have the right to ask us for a copy of your data, to correct it, to delete it, to limit or object to how we use it, to move it to someone else, and to withdraw consent at any time. To use any of these rights, contact us using the details above. We will reply within one month.
11Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).
12Children
Our services are for adults. We do not knowingly collect data from anyone under 18. If you are under 18, please do not book without a parent or guardian.
13Links to other sites
Our website links to other sites, such as Instagram, TikTok and Square. We are not responsible for their privacy practices, so please read their policies.
14Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.