1. Introduction

This Privacy Policy explains how Tatsiana Sakharava ("I", "me", "my"), a permanent makeup artist based in Utrecht, the Netherlands, collects, uses, and protects your personal data when you visit my website or book an appointment.

I am committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.

2. Data Controller

The data controller responsible for your personal data is:

3. Data I Collect

I may collect the following personal data:

• Name and contact details (phone number, email address)
• Appointment information (date, time, service selected)
• Health-related information relevant to the procedure (contraindications, allergies)
• Photos of procedure results (only with your explicit consent)
• Payment information processed via secure third-party services
• Technical data collected via the website (IP address, browser type, visit duration) through cookies

4. How I Use Your Data

Your personal data is used exclusively for:

• Scheduling and confirming your appointments
• Sending appointment reminders and aftercare instructions
• Ensuring your safety during and after the procedure
• Processing payments and managing deposits
• Responding to your enquiries
• Improving the quality of my services

I do not use your data for automated decision-making or profiling.

5. Legal Basis for Processing

I process your personal data based on the following legal grounds:

• Contract performance — to fulfill a booking or service agreement
• Legal obligation — to comply with applicable Dutch law
• Legitimate interests — to manage client communications and improve services
• Consent — for photos and marketing purposes, where explicitly given

6. Sharing Your Data

I do not sell, rent, or share your personal data with third parties, except:

• Booking platforms (e.g. Treatwell) used to manage appointments
• Payment processors, solely to complete transactions
• Where required by law or legal proceedings

Any third-party service providers are bound by data processing agreements and are required to handle your data securely.

7. Photos and Social Media

I may take before-and-after photos of your procedure for professional documentation. These photos will only be shared publicly (on Instagram or the website) with your explicit written or verbal consent. You may withdraw this consent at any time.

8. Data Retention

I retain your personal data only for as long as necessary:

• Client records and health information: up to 5 years after the last appointment
• Booking and payment records: as required by Dutch tax regulations (7 years)
• Photos: until you request their removal

9. Your Rights

Under the GDPR, you have the right to:

• Access the personal data I hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing of your data
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl

To exercise any of these rights, please contact me directly via phone or Instagram.

10. Cookies

My website may use cookies to ensure proper functionality and analyse visitor behaviour. You can manage cookie preferences in your browser settings. Disabling cookies may affect certain features of the website.

11. Security

I take appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access. All data transmitted via the website is encrypted using SSL/TLS.

12. Changes to This Policy

I may update this Privacy Policy from time to time. The most current version will always be available on this page. Significant changes will be communicated via the website or directly to clients where appropriate.