Privacy Policy

Effective Date: April 5, 2026  |  Last Updated: October 24, 2026

Lash Concierge ("we," "us," or "our"), operated out of Pompano Beach, Florida, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at lashconcierge.com and use our services. By using our website or booking an appointment, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

When you submit our booking form, we collect the following personal information:

• First name and last name
• Email address
• Phone number
• Street address and zip code
• Service type and add-on selections
• Lash goals and preferences
• Whether you currently have lash extensions
• Allergies and sensitivities (health-related information)
• Massage table preference
• Date of birth
• Whether you have agreed to receive text messages, the date you agreed, and how that agreement was given
• How you heard about us

1.2 Health-Related Information

Health-related information is collected in two places. Our booking form asks about allergies, current eye infections, and prior reactions to lash extensions. Separately, before your appointment we send you an intake form, which asks about medical conditions, allergies, prior reactions to lash products or adhesives, and any history of eye infection. The booking-form health questions are required to book. The intake form's health questions are optional, but answering them helps keep your service safe.

The intake form also collects:

• Medications and supplements
• Pregnancy or nursing status
• Past treatments and procedures (for example Botox, Accutane, chemotherapy or radiation, laser treatments, peels, or eye surgery)
• Skin type and skincare products you use
• Eye-related details (contact lenses, eye drops, lash serums, and your last eye exam)
• Your reasons for booking and prior lash experience
• Your signature on the intake form
• Whether you consent to photos of your lashes being used in our portfolio

Your health information is used only to keep your service safe. It is seen by your lash artist and sent to her business email so she can prepare for your appointment. It is stored on our secure server, which our technology provider, MayoClaw LLC, can access only to maintain the website. We never sell your health information or use it for marketing. You may request its correction or deletion at any time by contacting us at hello@lashconcierge.com; Section 5 explains what we keep and why.

1.3 Payment Information

Payment processing is handled entirely by Stripe, a PCI DSS-compliant payment processor. Your credit card number, CVV, and other payment card details are collected and processed directly by Stripe. We never receive, store, or have access to your full payment card information on our servers. We only receive confirmation of payment status and transaction identifiers from Stripe.

1.4 Address and Distance Data

The address you type is sent to Mapbox to suggest, confirm, and measure driving distance to your address, and the resulting coordinates may also be sent to OpenRouteService. Neither receives your name, contact details, or health information.

This is used solely to determine travel fees for mobile appointments and to confirm you are within our service area. Each provider's own privacy policy governs their handling of that data.

1.5 Automatically Collected Information

We use a privacy-focused, cookieless analytics service. It does not use cookies, does not track personal data, and does not collect or store any personally identifiable information. It collects only aggregate, anonymous data such as page views, referral sources, and device types. No individual user profiles are created.

In addition, our blog pages keep a record on our own server of which page was viewed, the date and time it was viewed, and the website you arrived from, if any. This is used only to see which articles are being read. No IP address, device identifier, browser fingerprint, or approximate location is recorded or stored. This record applies to our blog pages only, not to the rest of the website.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• Service delivery: To process your booking request, prepare for your appointment, and provide customized lash extension services
• Communication: To contact you regarding your booking, appointment confirmations, reminders, and follow-up care instructions
• Safety: To review allergies, sensitivities, and health information to ensure safe service delivery
• Rebooking: To retain your preferences and information for convenient future appointments
• Travel fee calculation: To calculate distance-based travel fees using your address
• Business operations: To improve our services, respond to inquiries, and manage our business

3. Cookies and Tracking Technologies

Our website does not use cookies to track visitors. We do not use cookie-based tracking, advertising pixels, or third-party advertising scripts. Our analytics provider is entirely cookieless and does not track individual users across sessions or websites.

One cookie is used on this website, and it is not set for visitors or clients: it keeps the business owner signed in to her own private administrative area. Browsing the public website, submitting a booking, or completing an intake form does not set a cookie on your device.

We do not use the TikTok Pixel, Meta Pixel, Google Ads tracking, or any other cross-site advertising trackers on this website. If you arrive at our website from a social platform such as TikTok, Instagram, or Facebook, that platform may record the outbound click according to its own privacy policy; we do not receive any personally identifiable information about you from those platforms.

3.1 Social Media & TikTok

Lash Concierge may maintain profiles on social platforms including TikTok, Instagram, Facebook, and Yelp. Any information you submit directly through those platforms (comments, direct messages, profile details) is governed by each platform's own privacy policy. We do not import follower lists, viewer data, or platform identifiers into our booking system. If you contact us through a social platform and then book an appointment through our website, your booking information is kept entirely within our own systems.

3.2 Text Messages

If you opt in, we text appointment confirmations and reminders, and may occasionally send offers and promotions. Message frequency varies, and message and data rates may apply. Reply STOP to any message to opt out at any time. Texts are sent on our behalf by MayoClaw LLC, our technology provider.

We record that opt-out and no further texts are sent to that number. You may also ask us to stop by emailing hello@lashconcierge.com.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only with the following parties and only as necessary:

• Google (typefaces): Several of our pages — including the intake form, where health information is entered — load their typefaces from Google's font service. When your browser loads those font files, it connects directly to Google, and Google receives your IP address and the address of the page you are viewing. This happens as part of displaying the page. We do not send Google anything you type, and Google is not given your booking, contact, or health information.
• Stripe: Our payment processor receives payment information, plus your name and booking details (service and amount), to process deposits and transactions. Stripe is PCI DSS Level 1 compliant.
• Mapbox and OpenRouteService: The address you type is sent to Mapbox to suggest, confirm, and measure driving distance to your address, and the resulting coordinates may also be sent to OpenRouteService. Neither receives your name, contact details, or health information.
• Email delivery provider: Booking confirmations, reminders, and other service emails are sent through a third-party email delivery service, which receives your email address and the contents of those messages.
• MayoClaw LLC: Our website hosting, text messaging, and technical support provider may have access to server-stored data as necessary for website maintenance and support.
• Legal requirements: We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Retention

We retain your personal information as described below. Specifically:

• Client records (name, contact info, preferences) are retained to facilitate future appointments and provide consistent service
• Booking records are retained for business and accounting purposes
• Health-related information (allergies, sensitivities) is retained to ensure ongoing service safety (including intake form answers)
• Notes your lash artist records about your appointments and preferences.

We keep client, booking, and health records for as long as you are a client, and afterward as needed for safety, insurance, legal, and accounting reasons. You can ask us to delete your information at any time by emailing hello@lashconcierge.com. We will delete what we are not required or permitted to keep, and tell you what we kept and why, within 45 days.

6. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information. These include encrypted connections (HTTPS/TLS), secure server infrastructure, and limiting access to personal data to authorized personnel. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

These requests are subject to the exceptions described in Section 5, including records we are required or permitted to keep for safety, insurance, legal, and accounting reasons.

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. There is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at hello@lashconcierge.com. We will verify your identity before processing your request and respond within 45 days.

7.2 Virginia Residents (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a copy of their personal data, as well as the right to opt out of the processing of personal data for targeted advertising, sale, or profiling. We do not engage in any of these activities. To exercise your rights, contact us at hello@lashconcierge.com.

7.3 Colorado Residents (CPA)

Colorado residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale of personal data, and profiling. We do not sell personal data or use it for targeted advertising. Contact us at hello@lashconcierge.com to exercise your rights.

7.4 Connecticut Residents (CTDPA)

Connecticut residents have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of the sale of personal data, targeted advertising, and profiling. Contact us at hello@lashconcierge.com to exercise your rights.

7.5 Utah Residents (UCPA)

Utah residents have the right to access and delete their personal data and to opt out of the sale of personal data and targeted advertising. Contact us at hello@lashconcierge.com to exercise your rights.

7.6 Oregon Residents (OCPA)

Oregon residents have the right to know, access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale of personal data, and profiling. Contact us at hello@lashconcierge.com to exercise your rights.

7.7 Texas Residents (TDPSA)

Texas residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale, and profiling. Contact us at hello@lashconcierge.com to exercise your rights.

7.8 Montana, Iowa, Indiana, Tennessee, and Other States

Residents of states with comprehensive consumer data privacy laws (including Montana, Iowa, Indiana, Tennessee, and others as enacted) may have similar rights to access, correct, delete, and opt out of certain processing of their personal data. We are committed to honoring these rights. Please contact us at hello@lashconcierge.com with your request and state of residence.

7.9 All US Residents

Regardless of your state of residence, you may contact us at any time to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Ask questions about our privacy practices

8. Do-Not-Track Signals

Our website does not currently respond to Do-Not-Track (DNT) browser signals. However, because we use a cookieless, privacy-focused analytics tool and do not engage in cross-site tracking, your browsing activity on our site is not tracked in a personally identifiable manner regardless of your DNT setting.

The one additional record we keep is the blog page record described in Section 1.5 — the page viewed, the time, and the referring website. It contains no IP address and nothing that identifies you personally, and it is not linked to any individual or used to build a profile.

9. Children's Privacy

Our services are intended for individuals aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from a minor, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a minor, please contact us at hello@lashconcierge.com.

10. Third-Party Links

Our website may contain links to third-party websites (such as our social media profiles). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website and services after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Lash Concierge
Pompano Beach, Florida
Email: hello@lashconcierge.com