PMU BROWS SPECIALIST

Last updated: 28th January 2026

I am committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how I collect, use, store, and protect your information when you use my website, book an appointment, or receive a treatment.

I operate as a sole trader in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR).

What information I collect
I may collect and store the following personal and sensitive information:

Personal details

• Name

• Email address

• Phone number

• Home address

• Date of birth

• Next of kin details

​

Health & treatment information (special category data)

• Medical history

• Allergies

• Skin conditions

• Medications

• GP information

• Screening forms

• Patch test results

• Consent forms

• Signatures

​

Media

• Photos and videos taken before, during, or after treatments (with consent)

 

How your data is collected
Your information may be collected via:

• Online booking and consultation forms through Ovatu

• Email communication

• Social media direct messages

• WhatsApp or phone messages

• In-person or online consultations

 

How your data is used
Your data is used for:

• Providing safe and appropriate treatments

• Managing bookings and appointments

• Sending confirmations and important treatment information

• Legal, insurance, and compliance purposes

• Marketing communications (where consent has been given)

 

Where your data is stored
Your information may be stored securely across:

• Ovatu booking system

• Email systems

• Paper records (historical)

• Cloud storage (iCloud and Google Drive)

• Messages, WhatsApp, and social media DMs

​

I take reasonable steps to protect your information from unauthorised access, loss, or misuse.
 

How long your data is kept
Client records are legally required to be retained for a minimum of 7 years. In some cases, data may be kept for longer for ongoing client history, legal, or insurance purposes.
 

Sharing your data
Your data may be shared with trusted third parties only when necessary, including:

• Booking and scheduling platforms (Ovatu)

• Payment providers (for processing payments)

​

These providers manage their own data protection obligations. Some services may store data outside the UK or EU in accordance with their own privacy policies.

I do not sell or rent your personal data.

Your rights
Under UK GDPR, you have the right to:

• Access your personal data

• Request corrections

• Request deletion (where legally possible)

• Withdraw consent for marketing

• Ask questions about how your data is used

​

To exercise your rights, please contact me using the details below.

Contact details
For privacy or data-related enquiries, please contact:
Email: pmubrowsspecialist@gmail.com