Privacy Policy

1. Information We Collect

To provide a seamless booking experience (under 60 seconds) and deliver our beauty services, we collect the following categories of personal information:

• Booking Information: Full name, phone number, email address, preferred appointment date & time, selected services, and assigned artist.
• Payment Data: Secure Paystack transactions – we do not store full card details on our servers. Payment is processed via Paystack (PCI DSS Level 1).
• Communication Data: Email reminders (24h prior), booking confirmations, and support inquiries.
• Usage Data: Anonymous analytics (page visits, referral source) to improve your experience. No personal tracking for advertising.

2. How We Use Your Information

We limit data usage to the following legitimate business purposes:

• ✅ Process and confirm your booking (immediate confirmation via email).
• ✅ Send automated 24‑hour appointment reminders and follow-up thank you messages.
• ✅ Communicate important updates (artist schedule changes, studio closures).
• ✅ Improve our website, services, and customer support.
• ✅ Prevent fraudulent transactions and ensure payment security.

We will never sell, rent, or share your personal information with third parties for marketing purposes without explicit consent.

3. Payment Security & Paystack

All payments are processed through Paystack (a leading African payment gateway). When you make a payment, your financial data is encrypted and transmitted directly to Paystack. We only receive confirmation of payment and your transaction reference.

• Settlement banks: Moniepoint MFB (6586326032) and Fidelity Bank (5601647161).
• Refund policy: Refunds are handled according to our Service Terms. Unused prepaid services can be refunded within 7 days.

4. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Booking records: Stored for up to 24 months for customer service, tax, and operational analysis.
• Email reminders & logs: Retained for 12 months to ensure delivery reliability.
• Anonymous analytics: Aggregated and retained indefinitely for trend tracking (no personal identifiers).

You may request deletion of your data at any time (see Section 7).

5. Email Reminders & Opt-Out

By booking an appointment, you consent to receive automated appointment reminders 24 hours before your scheduled service, as well as confirmation and post-appointment emails. These are transactional and essential for service quality.

You may opt out of non-essential communications by clicking the unsubscribe link in our emails. However, transactional messages (reminders, cancellations) are required for your booking and cannot be disabled without cancelling the appointment.

6. Third-Party Services We Use

We rely on trusted platforms to operate our website and booking system:

• Paystack – secure payment gateway.
• WordPress – content management system.
• SMTP email service – to deliver reminders and confirmations.

Each processor complies with applicable data protection laws and signs data processing agreements.

7. Your Privacy Rights (NDPR)

Under the Nigeria Data Protection Regulation (NDPR) and similar frameworks, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your data, subject to legal obligations.
• Right to Restrict Processing: Limit how we use your data while we resolve a dispute.
• Right to Object: Object to processing based on legitimate interests.
• Right to Data Portability: Receive your data in a structured, machine-readable format.

To exercise any of these rights, email us at blinksbyela@gmail.com. We will respond within 30 days.

8. Cookies & Tracking Technologies

Our website uses minimal cookies to ensure functionality (e.g., session management, booking preferences). We do not use third-party advertising cookies or cross-site tracking. You can disable cookies in your browser settings, but some booking features may not work optimally.

Essential cookies: session cookies, security tokens, and load balancer cookies. No persistent tracking beyond your session.

9. Children’s Privacy

Our services are intended for adults aged 18 years and older. We do not knowingly collect personal information from minors. If you believe a minor has provided us with data, please contact us immediately, and we will delete the information.

10. Data Security Measures

We implement industry-standard security measures:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Regular vulnerability scans and software updates.
• Access restricted to authorized studio personnel only.
• Secure backups and disaster recovery protocols.

While no system is 100% invulnerable, we continuously improve our safeguards to protect your information.

11. Changes to this Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The effective date at the top indicates the latest revision. Material changes will be communicated via our website or email (if you have an active booking). Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related inquiries, data requests, or concerns, please reach out to our Data Protection Officer:

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data rights have been violated.