Privacy Policy

1. Who we are and how to reach us

Mazur Studios LLC (“the studio”, “we”, “us”) is a beauty studio operating at 2807 South Dixie Hwy, West Palm Beach, FL 33405, United States. We decide what information is collected through this website and in the studio, and how it is used — which in data-protection terms makes us the controller of that information.

For anything in this policy, contact:

• Email — [email protected]
• Telephone — (323) 994-4225
• Post — Mazur Studios LLC, 2807 South Dixie Hwy, West Palm Beach, FL 33405

The studio is a small, owner-operated business. There is no separate data-protection officer; the owner handles these requests personally.

2. What this policy covers

This policy applies to:

• This website and every form on it
• Enquiries by telephone, email, text message and social media direct message
• Information collected in the studio during consultation and treatment
• Records kept after your appointment

It does not cover other companies' platforms. If you message the studio through Instagram or leave a review on Yelp or Google, that platform collects and controls its own data under its own policy, and we can only see what it shows us. Their policies apply to what happens on their side, not this one.

3. Information you give us directly

Through the website

The contact form asks for your name, email address, an optional telephone number, the service you are asking about, and your message. The booking form additionally asks for your preferred date and time window, and whatever you choose to write in the notes field.

Nothing is collected before you press submit. There is no hidden field, no keystroke logging, and no partial-form capture: if you start typing and change your mind, nothing leaves your browser.

In the studio

Before a first appointment we ask about relevant skin, nail, eye or hair conditions, allergies and sensitivities, medication that affects the skin, previous reactions to products or adhesives, and — for some services — whether you are pregnant or nursing. We may photograph your hands, eyes, hair or face during a service.

Payment

Card payments are taken through a third-party payment terminal or provider. Full card numbers never reach the studio's own records — we see the last four digits, the card type and the authorisation result, which is what appears on the receipt.

4. Information collected automatically

This website is a set of static files. It contains no analytics script, no advertising pixel, no social media tracker, no chat widget, no embedded map, no external font and no external image. Nothing on the page contacts a third-party server, so no third party can profile you through this site.

Your web host — like every web host — records standard server logs when a page is requested: IP address, timestamp, the file requested, the response code, and the browser's user-agent string. These are generated by the hosting infrastructure for security and troubleshooting, are not linked to any client record, and are typically rotated within a short period by the host.

See the cookie policy for what is (and is not) stored in your browser.

5. Health and sensitive information

Some of what you tell us is more sensitive than a phone number: an allergy, a skin condition, a medication, a pregnancy, a past reaction to lash adhesive. We ask for it because the alternative is guessing, and guessing in this trade causes harm.

We handle it accordingly:

• It is recorded only where it changes what we do — product choice, patch testing, whether a service goes ahead at all
• It is never used for marketing, segmentation or any commercial purpose
• It is not shared with anyone outside the studio without your explicit permission, except where the law requires it
• You may ask us to record less detail — for example “adhesive sensitivity” rather than a named condition — and we will work with whatever level of detail you are comfortable giving, as long as it is enough to keep you safe

If you would rather not disclose something, tell us that. We would rather decline a service than perform it without the information needed to do it safely.

6. Why we use your information

We do not use your information for automated decision-making or profiling. There is no algorithm deciding anything about you here — just one person with a diary.

7. Photographs and social media

Photographs of work are taken only with your agreement, and consent is recorded per appointment rather than assumed once and forever.

• You can allow photographs for the studio's own records but not for publication
• You can allow publication but ask that your face be excluded — hands, nails, lashes or hair only
• You can decline entirely, and it changes nothing about the service you receive
• You may withdraw consent later. We will remove the image from the studio's own website and social accounts within seven days of your request

Once an image is public, other people may have copied or re-shared it. We can remove our copies; we cannot recall someone else's screenshot, and it would be dishonest to promise otherwise.

8. Who else sees your information

Your details are shared only with the small number of providers needed to actually run the business, and only to the extent each one needs:

• Web host — serves the website; sees server logs
• Form handler — if a form-processing service is connected, it receives the contents of the form solely in order to deliver it to the studio's inbox
• Email provider — stores the resulting correspondence
• Payment provider — processes the transaction and holds the card data we never see
• Accountant — sees transaction records, not consultation notes

Beyond that, disclosure happens only where the law requires it: a lawful request from a regulator, a court order, or a genuine emergency where sharing a medical detail is necessary to protect someone's life.

We do not sell, rent, trade or otherwise disclose your personal information for anyone's commercial purposes. We have never done so and have no plans to.

9. Where your information is stored

The studio operates in the United States and its records are held there. If a service provider processes data outside the country you live in, that provider is chosen on the basis that it offers an appropriate standard of protection and contractual safeguards for international transfers.

Paper consultation forms never leave the studio premises.

10. How long we keep it

Longer periods for incident and financial records exist because insurance and tax rules require them. Everything else can be deleted earlier on request.

11. How we keep it secure

• Digital records sit in password-protected, access-controlled accounts with two-factor authentication enabled
• Devices are encrypted and lock automatically
• Paper forms are kept in a locked cabinet in the studio, not in the treatment area
• Only the studio owner has access to client records
• Old records are shredded or securely wiped rather than binned
• Card data is never written down, photographed or stored by the studio

No system is perfect. If a breach occurs that is likely to put you at risk, we will tell you directly and promptly, explain what happened and what we are doing about it, and notify any regulator we are required to notify.

12. Your rights and how to use them

Whatever jurisdiction you are in, this studio will honour the following on request:

• Know — what we hold about you, where it came from and who has seen it
• Access — a copy of it
• Correct — fix anything inaccurate or incomplete
• Delete — remove your record, subject to the retention rules above where we are legally required to keep something
• Portability — receive your data in a common, machine-readable format
• Object or restrict — ask us to stop a particular use while a disagreement is resolved
• Withdraw consent — for photographs, marketing or anything else you agreed to, at any time
• Non-discrimination — exercising any of these changes nothing about the service or price you receive

How to make a request

Email {EMAIL} with “Data request” in the subject line, or write to the studio address. Say which right you are using; you do not need to explain why.

What happens next

1. We acknowledge the request, normally within two working days.
2. We verify it is really you — usually by replying to the email address already on file, or by confirming a detail only you would know. This is a protection, not an obstacle.
3. We complete the request within 30 days. If it is unusually complex we will tell you before that deadline and explain the delay.

There is no charge. If a request is repetitive or clearly excessive we may explain why we are declining it rather than charging for it.

13. California residents

If you live in California, the CCPA as amended by the CPRA gives you specific rights. The practical position at this studio is simple:

• The categories of personal information we collect are set out in sections 3 and 5 above
• The purposes are set out in section 6, and the recipients in section 8
• We have not sold or shared personal information in the preceding twelve months, and we do not share it for cross-context behavioural advertising. There is therefore nothing to opt out of
• We do not knowingly collect or sell the personal information of anyone under 16
• Your rights to know, delete, correct, limit the use of sensitive information and be free from discrimination are honoured through the process in section 12

You may use an authorised agent to make a request; we will ask for written proof of their authority and may ask you to confirm it directly.

14. Visitors from the EU, EEA and UK

If you contact the studio from the EU, EEA or UK, we will treat your information consistently with the standards of the GDPR and UK GDPR: the lawful bases in section 6 apply, the rights in section 12 apply, and you may complain to your national supervisory authority if you believe we have handled your information improperly.

We would ask you to raise it with us first — a small studio can usually fix a problem faster than a regulator can.

15. Marketing and communications

By default you receive only what you asked for: replies to enquiries, appointment confirmations, reminders and aftercare information. These are service messages, not marketing, and they stop when you stop booking.

Anything promotional — seasonal offers, new services, a newsletter — is opt-in only. Every such message carries a one-click unsubscribe, and unsubscribing is actioned within seven days. You can also simply reply and say stop.

Appointment reminders can be switched to email only, text only, or off entirely. Tell us your preference and it is recorded on your file.

16. Children and young people

The website is intended for adults. We do not knowingly collect information from anyone under 13 through it.

Some services can be provided to clients aged 13 to 17 with a parent or guardian present who gives consent and remains on the premises for the appointment. In that case the consultation record is created with the guardian and kept under the same rules as any other client record.

If you believe a child has given us information without a guardian's involvement, contact us and it will be deleted.

17. Links to other websites

This site links out to Yelp, Instagram and Google Maps. Following any of those links takes you to a service we do not control, which will apply its own privacy policy and set its own cookies. We are not responsible for their practices, and this policy stops at the edge of this website.

18. Changes to this policy

If this policy changes, the revised version appears on this page with a new effective date at the top, and the previous version is retained internally so it is clear what changed and when.

Minor wording changes are made without notice. A change that materially affects how existing clients' information is used will be communicated by email before it takes effect, and where the change requires it, we will ask for fresh consent rather than assume the old one carries over.

19. Complaints

If you think we have got something wrong, please tell the studio directly first — email [email protected] with “Privacy complaint” in the subject line. You will get a substantive answer within 30 days.

If you are not satisfied with the response, you may complain to the relevant authority for where you live: the Office of the Attorney General for your state in the US, the Information Commissioner's Office in the UK, or your national data protection authority in the EU or EEA.

Related policies

These documents work together. Where one is more specific than another, the more specific one applies to the situation it covers.

• Terms of Service — The agreement between you and the studio.
• Booking & Cancellation Policy — Deposits, rescheduling, no-shows and refunds.
• Health & Safety Policy — Sterilisation, patch testing and contraindications.
• Accessibility Statement — How we make the site and the studio usable for everyone.
• Cookie Policy — What this website stores in your browser — and what it does not.

Questions about this policy

Write to [email protected], call (323) 994-4225, or post to Mazur Studios LLC, 2807 South Dixie Hwy, West Palm Beach, FL 33405. Policy questions are answered within five working days; formal requests under the sections above follow the timescales stated there.