Privacy Policy

At The Lash Box, we take your privacy seriously. This policy explains what information we collect, why we collect it, and how we use it — written in plain English so you actually understand it.

Last updated: March 2026

1. Who We Are

The Lash Box is a luxury lash salon based in Manchester, UK. Our website is thelashboxs.co.uk and you can contact us at loredana@thelashboxs.co.uk.

 

2. What Information We Collect

We only collect what we need. This includes:

  • Booking information — your name, email address, phone number, and the service you’ve booked. This is collected when you make an appointment through our website.
  • Communication data — any messages you send us via our contact form or by email.
  • Technical data — basic information about your visit such as your browser type and IP address, collected automatically by our website to keep it running securely.

We do not collect payment card details directly — payments are handled by secure third-party processors.

 

3. How We Use Your Information

We use your information to:

  • Confirm and manage your appointments
  • Send you booking reminders and updates
  • Respond to your enquiries
  • Improve our services and website

We will never sell your data, and we will never use it for anything unrelated to your experience with us.

 

4. Google Calendar Integration

Our booking system (Amelia) integrates with Google Calendar to manage our team’s schedules and avoid double bookings. This integration is used only by our staff — it is not connected to your personal Google account in any way.

When a booking is made, appointment details are synced to our team’s internal Google Calendars so that the right person is available to see you. No client Google account data is accessed or stored.

This integration uses Google’s OAuth 2.0 authorisation system. You can learn more about how Google handles data at policies.google.com/privacy.

 

5. Who We Share Your Data With

We only share your data with trusted tools that help us run our business:

  • Amelia — our booking plugin, which stores appointment details
  • Google Workspace — used internally for calendar management
  • Fresha & Treatwell —  additional booking marketplaces we list on

All third parties we work with are GDPR-compliant. We do not share your data with anyone else.

 

6. How Long We Keep Your Data

We keep your booking records for up to 3 years for business and legal purposes. After that, your personal data is deleted. If you’d like your data removed sooner, just ask us.

 

7. Your Rights (GDPR)

Because we’re based in the UK, you have full rights under UK GDPR. You can:

  • Ask to see what data we hold about you
  • Ask us to correct inaccurate data
  • Ask us to delete your data
  • Ask us to stop using your data for marketing
  • Complain to the ICO (Information Commissioner’s Office) at ico.org.uk

To exercise any of these rights, email us at loredana@thelashboxs.co.uk and we’ll respond within 30 days.

 

8. Cookies

Our website uses cookies to make it work properly — for example, to remember your booking session. We do not use advertising or tracking cookies. If you’d prefer not to accept cookies, you can adjust your browser settings, though some parts of the site may not work as expected.

 

9. Security

We take reasonable steps to protect your data. Our website uses HTTPS encryption and we limit who on our team can access client information.

 

10. Changes to This Policy

If we update this policy, we’ll post the new version here with an updated date at the top. We recommend checking back occasionally.

 

11. Contact Us

If you have any questions about how we use your data, please get in touch:

The Lash Box
Manchester, UK
loredana@thelashboxs.co.uk
thelashboxs.co.uk