Privacy policy
What happens to your information, in plain English rather than in the usual language.
Who this policy is from
This website is operated by Rai Permanent Makeup, 89 Victoria Street, Windsor, SL4 1EH. For anything to do with your personal information, contact Rai at raipmu@gmail.com or on 07570 042034.
Rai Permanent Makeup is the data controller for the information described here. That means she decides what is collected and why, and she is responsible for looking after it.
What this website collects
Very little, and none of it identifies you.
There is no contact form on this site, no account to create and no newsletter to join. Nothing you type is sent anywhere, because there is nowhere on the site to type anything.
The site sets no cookies. There is no cookie banner because there is nothing to consent to.
Website analytics
The site uses Plausible Analytics to count visits. Plausible does not use cookies, does not collect personal data and does not track anyone across websites. It records aggregate information such as which pages were viewed, roughly which country a visit came from, and which site a visitor arrived from. None of it can be traced back to an individual, including by Rai.
The site also counts how often people select the booking link, the WhatsApp link, the phone number and the text message link. These are counted as totals only. There is no record of who selected what.
Website hosting
The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical information such as IP addresses in order to serve pages and to protect the site from attacks. This happens whether or not you interact with anything, and it is a normal part of how the internet works.
When you get in touch
If you message on WhatsApp, send a text, call or email, Rai will have whatever you choose to tell her, along with your phone number or email address.
She uses that information to answer you and to arrange an appointment if that is what you want. It is not added to a mailing list, it is not sold, and it is not shared with anyone else.
WhatsApp is operated by Meta and messages are handled on their systems, subject to their own terms and privacy policy. Email sent to the address above arrives in a Gmail account operated by Google. If you would rather not use either, call or send a text instead.
When you book an appointment
Online bookings are handled by Fresha, a booking platform. When you book through Fresha you are entering your details into their system, and their privacy policy governs what they do with it. Rai sees the booking details that Fresha passes to her, which is what she needs to know who is coming and for what.
Your treatment records
Before any treatment, Rai will ask you to complete a consultation and consent record. This asks about your medical history, medication, allergies, previous treatments and anything else that affects whether a treatment is safe and suitable for you.
Some of this is health information, which data protection law treats as a special category and holds to a higher standard. It is collected on the basis of your explicit consent, given at the time, and it is used for one purpose: deciding whether and how to treat you safely, and recording what was done.
These records are kept securely and are not shared with anyone unless the law requires it, or unless it becomes necessary for an insurance or a medical reason connected to your treatment. They are kept for as long as Rai's insurer requires records to be retained, and are securely destroyed after that.
Photographs
Rai photographs a lot of her work, and photographs of treatments appear on this website and on her social media accounts.
No photograph of you is taken without you being asked, and no photograph of you is published anywhere without your specific consent. Consent to be photographed and consent to have that photograph published are two separate things, and you can agree to one and not the other.
If you have previously agreed to a photograph being used and you change your mind, tell Rai and it will be removed. You do not have to give a reason.
Who your information is shared with
Rai does not sell or rent personal information to anyone, and she does not share it for marketing.
The organisations that process information on her behalf, or as part of how the site and the business run, are Cloudflare for hosting, Plausible for anonymous analytics, Fresha for bookings, Google for email, and Meta where you choose to use WhatsApp. Each of these has its own privacy policy.
Your rights
Under UK data protection law you have the right to ask for a copy of the information held about you, to have it corrected if it is wrong, to have it deleted in some circumstances, to object to or restrict how it is used, and to withdraw consent you have given.
To do any of that, email raipmu@gmail.com. Rai will respond within one month.
One point worth being straight about: where a treatment record has to be kept for insurance reasons, a request to delete it may not be something Rai is able to agree to. If that applies she will explain why rather than simply refuse.
Complaints
If you are unhappy with how your information has been handled, raise it with Rai first. If you are still unhappy, you can complain to the Information Commissioner's Office, which is the UK regulator for data protection. Their website is ico.org.uk and their helpline is 0303 123 1113.
Links to other websites
This site links out to Fresha, Google, Instagram and Facebook. Once you follow a link you are on somebody else's website and their privacy policy applies, not this one.
Changes to this policy
If this policy changes, the revised version will be published here and the date at the top will be updated. Anything significant will be flagged rather than slipped in quietly.