Privacy policy
This policy explains what personal information PaoLash collects when you visit this website, book a treatment, contact us or train with the academy, why we use it, and the choices you have.
Last updated 24 October 2026
Who we are
PaoLash Lounge & Academy (“PaoLash”, “we”, “us”) is a lash studio and lash academy at 6 St Andrew's St, 3rd Floor, Dublin 2, D02 VW40. We are the controller of the personal information described here.
For any privacy question or request, email paolashacademy@gmail.com or call 083 811 9207.
What we collect
- When you book: your name, phone number, email, appointment and treatment history, payments and deposits. Bookings are handled through Fresha.
- When you contact us: by phone, WhatsApp, email, Instagram or TikTok, we receive your contact details and whatever you tell us.
- When you have a treatment: your consultation answers, information about allergies, sensitivities, eye conditions or medication that affects your treatment, patch-test results and treatment notes.
- Photos: we only photograph your lashes for our website or social media with your permission.
- Academy: if you enquire about or join a course, your contact details, payments, attendance and progress.
- This website: we do not ask for personal details here. If you allow analytics cookies, Google Analytics collects information about your device and how you use the site (see our cookie policy). Our hosting provider also records technical information, such as IP addresses, to deliver and protect the site.
Why we use it
| Purpose | Legal basis |
|---|---|
| Booking, providing and managing your appointments and courses | Our contract with you, or steps you ask us to take before one |
| Treating you safely, using health information such as allergies and patch-test results | Your explicit consent |
| Replying to your messages and enquiries | Steps you ask us to take before a contract, or our legitimate interest in replying |
| Keeping accounts and tax records | Our legal obligations |
| Handling complaints and defending legal claims | Our legitimate interests and, for health information, establishing or defending legal claims |
| Showing photos of our work | Your consent, which you can withdraw at any time |
| Understanding how this website is used | Your consent, given in cookie settings |
| Sending you news or offers, if you choose to receive them | Your consent or, for existing clients, the law’s allowance for similar services, with an easy way to opt out every time |
Your health information
Lash and brow treatments use products close to your eyes. That is why we ask about allergies, sensitivities, eye conditions and other relevant health matters, and why new clients have a patch test. We use this information only to decide whether and how we can treat you safely, and never for marketing.
You can withdraw your consent at any time, but we may then be unable to treat you safely. Please do not send health details by WhatsApp or social media; tell your artist at your consultation instead.
Who we share it with
- Fresha, our booking and payment system.
- Google, for website hosting (Firebase), Google Analytics if you allow it, and email.
- WhatsApp (Meta), Instagram (Meta) and TikTok, when you message us there.
- Our accountant, insurer and professional advisers, when needed.
- Public authorities, when the law requires it.
These providers process information on our instructions, or under their own privacy policies where they act independently, for example your own Fresha account. We never sell your personal information.
Transfers outside Europe
Some providers, such as Google and Meta, may process information in the United States. Those transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long we keep it
| Information | How long |
|---|---|
| Enquiries that do not lead to a booking | 12 months |
| Client records, consultations and patch-test results | 6 years after your last appointment |
| Accounting and payment records | 6 years, as Irish tax law requires |
| Photos of your lashes | Until you withdraw your consent. We then remove them from our website and channels, but cannot recall copies others have shared. |
| Website analytics | No longer than 14 months |
Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or send it to you or another provider in a portable format. You can object to our use of it, and you can always stop marketing. Where we rely on your consent, you can withdraw it at any time.
To use any of these rights, contact us using the details above. We will reply within one month, and there is normally no charge. We do not make decisions about you by automated means.
Complaints
If you are unhappy with how we handle your information, please tell us first so we can put it right. You also have the right to complain to the Data Protection Commission at dataprotection.ie.
Keeping it safe
We use established providers with appropriate security, and only the people who need your information to look after you can access it.
Children
This website is not aimed at children, and we do not knowingly collect children’s information through it.
Changes to this policy
We will update this page when our practices change, and the date at the top shows the latest version.