Privacy Policy

Last updated: September 2026

1. Who I Am

Brows by Abbie is a sole-trader beauty business run by Abbie Mabbott, based in Burton Joyce, Nottingham. For the purposes of UK data protection law, I'm the data controller for any personal information collected through this website, the online booking system, and in person during consultations and treatments.

2. What Information I Collect

Depending on how you get in touch or book with me, I may collect:

• Your name, phone number and email address, when you enquire or book an appointment.
• Health and medical history relevant to your treatment, such as allergies, skin conditions, medications and contraindications, collected on a consultation and consent form before any semi-permanent makeup treatment.
• Before and after photographs of your treatment, taken with your consent.
• Payment information, processed securely by the booking platform — I don't store your full card details myself.
• Basic technical information from this website, such as pages visited, gathered anonymously to understand how the site is used.

3. Why I Collect It

Your information is used to book and manage your appointments, carry out treatments safely, provide relevant aftercare advice, keep accurate treatment and consultation records as required by insurance and local authority licensing, and, only with your separate consent, to share before and after photos for marketing.

4. My Legal Basis for Using It

Under UK GDPR, most of your information is processed under contract (to provide the treatment you've booked) and legal obligation (to keep the health and safety records required for insurance and licensing purposes). Health information is special category data, and I only collect and use it with your explicit consent, given on your consultation form. Marketing photos are also used only with your specific, separate consent, which you can withdraw at any time.

5. How Long I Keep It

Consultation, consent and treatment records are kept for a minimum of three years in line with insurance and industry good-practice guidance for cosmetic tattooing, after which they're securely deleted or destroyed. Booking and contact details are kept only for as long as needed to manage our ongoing relationship, and marketing photos are kept until you ask for them to be removed.

6. Sharing Your Information

Your information is never sold. It may be shared with trusted third-party service providers who help run the business, such as the online booking and payment platform, purely so they can perform that function on my behalf. Where required by law, information may also be shared with insurers, local authorities, or regulatory bodies.

7. Cookies & Booking System

This website's booking and calendar features are provided through a third-party platform, which may use cookies or similar technologies to make the booking widget work correctly. These are functional rather than tracking cookies, and no health information is ever passed to advertising networks.

8. Keeping Your Data Safe

Paper consultation forms are stored securely and out of public view, and digital records are kept on password-protected systems. Access to your health and consultation information is limited to what's needed to provide your treatment safely.

9. Your Rights

Under UK data protection law, you have the right to ask for a copy of the personal information I hold about you, ask for it to be corrected or deleted, object to or restrict certain uses of it, and withdraw consent for marketing photos at any time. To make any of these requests, just get in touch using the details below.

10. Contact & Complaints

If you have any questions about this policy or how your information is used, contact me on 07852 936325 or [email protected].