How MTB looks after the information you share with us.

This page explains what personal information may be collected across the website, bookings and client access area, why it is used, and the choices available to you.

Who we are

MTB is a lash studio based in Watford, Hertfordshire, UK. This privacy policy explains how MTB collects, uses and protects personal information across the website, booking flow, client access area and related communications.

If you have any questions about this policy or your personal information, you can contact MTB at mtb.appointment@gmail.com.

What information we collect

Identity and contact details such as your name, email address and phone number.

Booking information such as chosen service, preferred date, preferred time, notes and appointment history.

Client access details such as your client code and secure sign-in session data.

Profile information you choose to provide, including date of birth, allergies or similar safety-related details.

Communications you send to MTB by email, forms or booking notes.

Technical and preference data such as essential session cookies and cookie choices.

If admin web push notifications are enabled, technical subscription data such as a browser push endpoint, public subscription keys and related device metadata.

How we use your information

To respond to enquiries and manage appointment requests.

To create or maintain your client account and secure access credentials.

To send booking confirmations, operational emails and appointment-related updates.

To deliver optional admin-only booking push alerts where the admin has chosen to enable them on a device.

To manage availability, client records, reviews, referrals and customer support.

To protect the website, admin tools and client dashboards from misuse or unauthorised access.

To comply with legal, tax, accounting, safety and record-keeping obligations.

Our lawful bases

Depending on the situation, MTB relies on one or more lawful bases under UK data protection law. These may include taking steps at your request before entering into a contract, performing a contract, complying with legal obligations, protecting legitimate business interests and, where appropriate, consent.

If you choose to provide special category information such as allergies or other health-related details, MTB will only use that information where needed for appointment safety and suitability and with an appropriate lawful basis.

Cookies and similar technologies

MTB uses essential cookies required for secure sign-in, protected client and admin access, and key website functions. Optional analytics cookies are not enabled unless you choose to allow them.

If the admin chooses to enable web push notifications for booking alerts, the admin device or browser may also store a service worker registration and a push subscription. These are only activated after the admin takes a clear action to enable them and can be turned off again from the dashboard or browser settings.

You can review your cookie choices at any time using the cookie settings link in the footer or by visiting the cookie page on this website.

How long we keep information

MTB keeps personal information only for as long as it is reasonably needed for the purpose it was collected, including appointment management, account security, support, legal compliance, tax, accounting and handling disputes or complaints.

Where information is no longer required, MTB will delete it or securely anonymise it where appropriate.

Who we share information with

MTB does not sell your personal information. Information may be shared with trusted service providers where needed to run the website and booking operation, such as hosting, email delivery, database, backup, web push delivery, security or technical support providers.

Information may also be shared where required by law, regulation, court order or to establish, exercise or defend legal claims.

International transfers

MTB aims to use providers that handle data in the UK or in locations with appropriate safeguards. If personal information is processed outside the UK, MTB will take reasonable steps to ensure appropriate protection measures are in place.

Your rights

If you want to exercise any of these rights, contact MTB using the details on this page. You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how your personal information is handled.

You may ask for access to the personal information MTB holds about you.

You may ask for inaccurate information to be corrected.

You may ask for information to be deleted in certain circumstances.

You may object to or request restriction of certain processing in some situations.

Where consent is relied on, you can withdraw that consent.