Privacy notice

This is version 0.1-borrador and it has no publication date yet.

This text is a draft.

I'm still writing it and it may change. Once it's published, you'll see the date here.

Who handles your data

I'm [NAME], a lash artist in [CITY], and I'm responsible for your personal data. My address for this notice is [ADDRESS].

What data I ask for

To book and charge you, I ask for your name, your email and your phone number.

In your health form I ask about allergies, recent surgery or infections, contact lenses and treatments. That's health data, which the law calls sensitive: I only process it with your express consent.

What I use it for

I use it to book your appointment, charge the deposit, send you reminders and send you your aftercare.

The note telling you when your fill is due is optional: you can ask me not to send it.

Who else handles it

I rely on Stripe for payments, Resend for email, Meta for WhatsApp messages, Vercel for the site and [PROVIDER] for the database.

Your ARCO rights

You can ask me for access, rectification, cancellation or objection regarding your data by writing to [EMAIL]. I'll answer within [DEADLINE].

How long I keep your health form

Your health form is stored encrypted and only I can see it. I keep it for [RETENTION PERIOD].

The law that applies

This notice follows Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, published in the DOF on March 20, 2025.