Data controller: BEAUTYBYBRYNLEESWARTZ LLC
Address: 3079 S 2500 W, Syracuse - 84075-4916, United States (US)
Email: hello@brynleebeauty.buzz
Phone: +18027557685
1. Overview of This Policy
BEAUTYBYBRYNLEESWARTZ LLC is a small lash and brow lounge based in Syracuse, Utah. The studio runs classic lash extensions, volume lash sets, brow lamination, brow tinting and shaping, lash refill appointments and aftercare retail kits. Running that business means handling a modest amount of personal information about the people who book appointments, visit the lounge, buy aftercare products and read this website.
The policy is written in plain language on purpose. It describes what is collected, why it is collected, how long it is kept and what choices a guest or a website visitor has. It also sets out the practical steps the studio takes to keep information safe. Where this policy uses the words we or us, those words refer to BEAUTYBYBRYNLEESWARTZ LLC. Where it refers to the visitor or the guest, those words refer to the person reading this page or receiving a service.
This policy was prepared for the operator of this website by the developer Brynlee Beauty. Questions about how the policy is worded can be sent to hello@brynleebeauty.buzz and the studio will pass them to the right person. Nothing on this page is legal advice to any visitor, and nothing in this policy creates a warranty or a contractual promise beyond the statements it makes.
The lounge is a service business that depends on trust. Guests lie on a bed with their eyes closed and allow a technician to work close to their face. That kind of appointment requires confidence, and confidence requires clear handling of records. This is the reason the policy is detailed and the reason the studio keeps its data collection deliberately narrow.
2. Scope and Who This Policy Covers
This policy covers information collected through the website at brynleebeauty.buzz, through email and phone conversations with the studio, through booking and reminder messages, and through in person visits to the lounge at 3079 S 2500 W, Syracuse - 84075-4916, United States (US). It applies to prospective guests, current guests, past guests, retail customers and anyone who subscribes to studio updates.
The policy does not cover information handled by third parties on their own behalf. If a guest follows a link from this website to an outside booking platform, a social media profile or a payment processor, that platform applies its own privacy practices. The studio will always point a guest toward the right privacy notice when a service is run by an outside provider.
The policy does not apply to job applicants beyond the recruitment process, although the same principles of fairness and minimisation are used there too. It does not apply to emergency contact information provided by a guest for a minor, beyond the purposes described in the section on service records.
By using the website or booking an appointment, a person confirms that they have read this policy. If a person does not agree with the practices described here, the studio asks that they do not submit information through the website and instead contact the studio to discuss the matter before booking.
3. Information We Collect
The studio collects information that a person chooses to provide, together with a limited amount of technical information generated when the website is used. The categories are set out below so that a guest can see exactly what is involved before sharing anything.
Identification and contact details
Name, email address, phone number, preferred method of contact and any notes about the best time to reach a person. These details allow the studio to confirm an appointment, send a reminder and return a call.
Appointment details
The service booked, the date and time, the technician, the duration, any rescheduling history and any notes about access or parking that a guest provides. This information keeps the lounge schedule accurate and prevents double bookings.
Service notes
Notes about the lash set or brow treatment, including the style, curl, length and thickness, the adhesive used, the tint shade mixed and the outcome. These notes make a return visit consistent with the last one.
Preference information
Preferences shared by a guest, such as preferred music volume, room temperature, blanket or pillow arrangements, and whether the guest prefers quiet during the service. These details are recorded only when the guest asks for them to be remembered.
Retail and payment details
Records of aftercare kits purchased or refilled, receipts, and payment status. Card details are handled by the payment processor and are not stored on the studio systems.
Correspondence
Emails, text messages, phone notes and messages sent through the contact form on this website, including the time and content of the enquiry.
Each category is collected for a specific purpose and is not mixed into a general pool. The studio does not buy contact lists, does not rent email lists and does not enrich guest records with information from data brokers.
4. Appointment and Service Records
Every guest has a card in the studio system. The card records the service history, the shape used, the products applied and any notes that help the next appointment run smoothly. Cards are kept in a locked cabinet while the studio is open and stored securely when the studio is closed. Digital notes are kept in a password protected account that only the studio owner and the working technician can open.
The card exists to protect the guest as much as the studio. If a guest returns after a long break, the card shows which adhesive held well and which shade of tint suited the brow. If a guest reports a reaction, the card shows exactly what was used on the day. Without that record, a return visit would start from scratch and the risk of repeating a problem would be higher.
Appointment records are not shared with other guests, with advertisers or with social media platforms. They are shared with a supplier only in the narrow case of a product complaint or an adverse reaction report, and only after the guest has been told what is being shared and why.
The lounge uses a written schedule alongside a simple digital calendar. Both copies are kept in step, and both are reviewed at the end of each week so that a cancelled appointment does not linger in one system while disappearing from the other.
5. Lash, Brow and Skin Information
Working close to the eye means collecting a small amount of information that could be described as sensitive. The studio asks about previous reactions to adhesives, lash lifts or tints, about contact lens use, about eye conditions that a technician should avoid aggravating, and about pregnancy or recent cosmetic procedures where those facts change the advice given.
This information is collected verbally, written on the guest card, and used solely to decide whether a service is appropriate and how it should be performed. It is not used for marketing, not sold, and not shared with anyone outside the studio except with the express consent of the guest, or where a report to a supplier or a clinician is necessary to protect the guest.
Patch test results are recorded with the date, the product tested and the outcome. A patch test record is kept for the life of the guest card so that a decision made years earlier can be reviewed if a guest returns and a different product is proposed.
Guests are never required to disclose a health condition to receive a service. A guest may decline to answer a question, and the studio will then explain any limits that decision places on the treatment. The aim is always a safe appointment, not a complete medical file.
Where a guest discloses something that changes the recommended service, the technician will say so plainly and offer an alternative. The studio would rather lose a booking than risk an eye or a brow. That judgement is part of the service and is not an attempt to gather more data than the visit requires.
6. Payment and Billing Information
Payments for services and aftercare kits are processed by a third party payment provider. The studio receives a confirmation that a payment was made, the amount, the date and the last four digits of the card used for reference. The studio does not receive or store full card numbers, security codes or bank account details.
Receipts are kept for accounting and tax purposes. A receipt may record the service purchased, the amount paid and any discount applied. Receipts do not record the health questions described in the previous section, and the studio does not pass service notes to an accountant or a bookkeeper.
Deposits, where they are requested, are handled through the same payment channel and are subject to the same rule. A deposit record is kept only as long as it is needed to reconcile the booking and the accounting period in which it falls.
If a guest requests a refund, the studio processes it through the original payment method wherever possible. The refund record is retained so that both the guest and the studio have a clear trail of what happened and when.
7. Website and Technical Information
This website is built as a set of static pages. It does not run an account system, does not include a payment gateway and does not store form submissions on a server. The contact form prepares a message in the visitors own email application, which means the message travels from the visitor directly to the studio inbox rather than through a database on this site.
The hosting provider may record standard technical information such as the requested page, the time of the request, the browser type and the approximate region from which the request came. This information is used to keep the site available and to detect abusive traffic. It is not used to build a profile of an individual visitor and it is not combined with guest records.
The site uses a small amount of JavaScript to run the mobile menu, the reveal animations and the contact form fallback. This script runs in the visitors browser. It does not send browsing data to the studio, and it does not read any information from other websites.
If the studio later adds analytics, advertising tags or embedded booking widgets, this policy will be updated before those tools go live, and the update will describe what the tool collects and how a visitor can opt out. A change of that kind will not be made silently.
8. How We Use Information
Information is used to confirm appointments, prepare the lounge for a visit, perform the service safely, keep the schedule accurate, answer questions, process payments, supply aftercare where it is wanted, and improve the way the studio runs. Each use is tied to running a lash and brow business well, not to gathering data for its own sake.
Service delivery
Contact details and service notes are used to greet a guest by name, to have the right tools and products ready, and to continue a shape or a tint from a previous visit.
Communication
Email and phone details are used to answer an enquiry, confirm a booking, send a reminder and follow up after a first visit. The studio keeps messages short and does not send a stream of unrelated promotions.
Safety and records
Patch test results and reaction notes are used to decide whether a service can proceed and to protect a guest if a product causes a problem.
Business administration
Payment and receipt records are used to keep accounts, to respond to a refund request and to meet tax and record keeping obligations.
Improvement
Feedback is used to adjust the booking flow, the timing of appointments and the range of aftercare products kept in the drawer. Feedback is summarised and does not identify an individual unless the guest asks to be named.
9. Legal Bases for Processing
Where privacy law uses the concept of a legal basis, the studio relies on a small number of clear grounds. The first is the performance of the service that a guest has asked for. Booking a lash set or a brow treatment requires contact details, service notes and a way to confirm the time.
The second is consent. Consent is used for marketing messages, for sharing a reaction report with a supplier and for any use that is not strictly needed to deliver the service. Consent can be withdrawn at any time by messaging the studio, and withdrawal does not affect the lawfulness of what was done before it.
The third is a legal obligation. Receipts and tax records are kept because the business is required to keep them. The fourth is a legitimate interest in protecting the studio and its guests, for example by keeping the site secure or by recording a safety incident accurately.
Where a guest offers health information, that information is used on the basis of explicit consent given at the chair, because it is needed to perform the service safely. A guest can decline that consent and still receive a service, provided the technician can work safely without the information.
11. How Long We Keep Information
Information is kept only as long as it serves a purpose. Appointment details are kept while the guest remains active and for a reasonable period after the last visit so that a returning guest keeps the benefit of the card. Service notes are kept for the life of the guest record because the value of the note lies in being able to compare a set from one year with a set from the next.
Marketing consent records are kept while the consent is active and for a short period after it is withdrawn, so that the studio can show it has honoured the withdrawal. Payment and tax records are kept for the period required by the applicable accounting rules and are then securely destroyed.
Website server logs held by the hosting provider follow the retention period set by that provider, which is typically short. The studio does not keep a separate copy of those logs and does not attempt to link them to a guest.
When a retention period ends, paper records are shredded and digital records are deleted from the active system. Backups that contain the record are rotated out on their normal schedule, and the record is not restored from a backup for the sole purpose of serving a request that has already been completed.
12. How We Protect Information
The studio takes a practical approach to security. Paper cards live in a locked cabinet. Digital notes live behind a password that is not shared beyond the owner and the working technician. Devices used to read email and the calendar are protected with a screen lock and are updated when updates are released.
Access is limited to the people who need it. A technician sees the card for the guests on the schedule. The owner sees the accounts and the supplier correspondence. Nobody in the studio has access to full card numbers, because those details are never held by the studio.
The studio trains on the basics: not clicking an unexpected link, not opening an attachment from an unknown sender, and not sharing a guest card with anyone who asks without a clear reason. A suspected breach is treated as urgent. The studio will investigate, contain the problem, and inform affected guests where the law requires it or where the studio believes a guest needs to know in order to protect themselves.
No system is perfect, and this policy does not claim otherwise. What the studio can promise is that records are deliberately narrow, access is limited, storage is controlled and the response to a problem will be honest and prompt.
14. Your Choices and Rights
A guest or visitor has choices about the information the studio holds. These choices include asking what is held, asking for a correction, asking for a deletion, asking for a copy, asking the studio to stop using information for marketing, and asking for a restriction on a particular use.
The studio also offers smaller choices throughout the visit. A guest can decline to have preferences recorded. A guest can ask that a photo not be taken. A guest can ask that an email reminder be replaced by a phone call. These choices are noted on the card and are honoured on later visits.
Where local law gives an additional right, the studio will apply that right as well. The studio will not charge a fee for a routine request and will not refuse a request simply because it is inconvenient. A request will be answered within the period set by the applicable law, and where that period is unclear the studio will aim to respond within thirty days.
The studio may need to verify identity before acting on a request. A short verification step protects the guest against a person pretending to be them, and the studio will ask for the least information needed to complete it.
15. Access and Correction Requests
To ask what information the studio holds, a guest can email hello@brynleebeauty.buzz or call +18027557685. The studio will confirm the categories held, the purpose of each, the recipients where any sharing has occurred, and the intended retention period. Where the record is short, a copy can be read over the phone or printed at the desk.
Correction requests are welcome. If a name has changed, a phone number is out of date or a service note contains an error, the studio will fix it and keep a short note of the correction so the history stays clear. If the studio disagrees with a correction, it will explain why and will record the guests view alongside its own.
A correction does not erase the original record where the original is needed for safety or for accounting. In that case the studio will add the correction and explain which part of the record remains unchanged and why.
16. Deletion Requests
A guest can ask the studio to delete their information. The studio will do so unless it has a legal or safety reason to keep a specific part of the record. Appointment history, patch test results and receipts are the usual exceptions, because they protect the guest and meet record keeping duties.
Where a deletion can be made, the studio will confirm it in writing. Paper cards are shredded, digital notes are removed from the active system, and the guest is removed from any marketing list. The studio will explain plainly what was deleted and what was kept, so there is no doubt about the outcome.
A deletion request from a retail customer who has never visited the lounge is usually simple, because the only record is a receipt and an optional email address. The studio will still confirm what happened rather than leaving the request to be guessed at.
17. Privacy for Children
The studio provides services to adults. Minors may be seen with the consent of a parent or guardian, and in that case the parent or guardian is the contact for the record. The website is not directed to children and does not knowingly collect information from anyone under the age of thirteen.
If the studio learns that a record has been created for a person under the age at which consent can be given without a guardian, the record will be reviewed and, where appropriate, removed. A guardian who believes such a record exists can contact the studio to have it checked.
Retail kits are not marketed to children. Any question about age and service eligibility is answered honestly at the desk, before a booking is confirmed.
18. Third Party Links and Services
This website may link to a social media profile, a mapping service or a payment page. Those destinations are run by other organisations and are not covered by this policy. The studio chooses links carefully, but it cannot control what another site does with information once a visitor leaves this domain.
Guests are encouraged to read the privacy notice of any outside service before entering personal details. If a third party service used by the studio changes its practices in a way that affects guests, the studio will review the arrangement and tell guests if a change matters to them.
Embedded content is kept to a minimum. The studio prefers a plain link over an embedded widget, because a plain link gives the visitor a clear choice about whether to leave this site.
19. Marketing and Studio Updates
Studio updates are sent only to people who have asked for them. A guest can ask at the desk or by email. The studio does not add a guest to a marketing list as a condition of booking, and it does not treat a booking as automatic consent for promotional messages.
An update might announce that the winter lounge calendar is open, that a new aftercare product has arrived in the drawer or that the studio will be closed for a short break. Updates are occasional, are written as a short note and always include a way to stop receiving them.
Unsubscribing is immediate for email. A guest can also ask that no marketing message be sent at all, in which case the studio will still contact them about an existing appointment but nothing else. That preference is recorded on the card so it survives a change of staff.
20. Changes to This Policy
This policy will be reviewed at least once a year and whenever the studio changes a tool, a supplier or a service in a way that affects personal information. The reviewed version will carry a new date at the top of the page, and the change will be summarised in plain language rather than hidden in a long paragraph.
Where a change materially affects what is collected or how it is used, the studio will tell active guests by email before the change takes effect. A guest who does not agree with the change can ask for their information to be handled under the previous practice for the remainder of the current booking, or can ask for a deletion where that is possible.
Older versions of the policy are kept internally so that the studio can explain what applied at a given time. A guest can ask for a summary of what changed between two versions.
21. How to Contact the Studio
Questions, requests and complaints about privacy can be sent to BEAUTYBYBRYNLEESWARTZ LLC at hello@brynleebeauty.buzz or by phone at +18027557685. The postal address is 3079 S 2500 W, Syracuse - 84075-4916, United States (US). The studio answers messages during opening hours and aims to reply within one business day.
A complaint will be acknowledged, investigated and answered in writing. If a guest is not satisfied with the answer, the studio will explain what further step is available, including any route to a supervisory authority where one applies. The studio would rather hear about a concern early than discover it later through a third party.
This policy is provided for the lash and brow lounge operated by BEAUTYBYBRYNLEESWARTZ LLC and was prepared by the developer Brynlee Beauty. The studio thanks every guest who takes the time to read it.
Back to the lounge homepage →