Privacy.

What we collect and why

Booking details

Your name, email, phone number, the service, date and time you choose, and any notes you add. We use them to hold your appointment, contact you about it, and send your confirmation and reminders.

Deposit payments

You pay the deposit on Square's secure checkout page. Your card number goes to Square, not to this website; we only see whether the payment went through and the amount. Your name, email and phone are also saved in Sarah's Square account so the appointment shows on her Square calendar.

Health intake form and waiver

Your answers about allergies, eye conditions, relevant medical conditions and medications, pregnancy or breastfeeding, previous lash reactions and patch tests, plus your photo-use choices. When you sign electronically we record the date and time, your IP address and your browser type as proof of the signature. We use this to decide whether a service is safe for you and to keep a record of your consent.

Photos

Before and after photos Sarah takes of your lashes are stored with your client record. They only appear on this website or on Instagram if you ticked the matching consent box on your intake form, and you can withdraw that consent at any time.

Studio notes

Sarah's notes about your lash style, eye mapping and any sensitivities, so each visit matches what worked last time.

Texts and emails

The texts (SMS) and emails we send you, such as confirmations, reminders with the studio address and Rewards sign-in codes, and any texts you send to the studio number, which are saved and forwarded to Sarah. Reply STOP to any text to stop receiving them.

Chat assistant

Messages you type into the chat on this website are sent to Anthropic, the company that makes the AI model behind the assistant, so it can write a reply. The website doesn't save chat conversations in its database; your browser keeps the current conversation for up to 30 minutes. Please don't share health details in the chat.

Lashout Rewards

Your phone number, stamps, rewards and number of visits. Signing in to your card sends a 6-digit code to your phone by text. If you add your card to Apple Wallet or Google Wallet, Apple or Google keeps the card in your wallet and it updates when your stamps change.

Cookies

A few essential cookies, for example to keep you signed in to your Rewards card. We don't use advertising or analytics trackers.

If you message the studio on Instagram, that conversation lives on Instagram and is covered by Instagram's own privacy policy.

Who helps us

We use these companies to run the website and the studio. They handle your information only to provide their service to us.

• Squaredeposit payments and Sarah's appointment calendar
• Twiliotext messages (SMS), including Rewards sign-in codes
• Resendemails such as your booking confirmation
• Vercelhosting this website and storing photos
• Neonthe database that holds bookings, client records and intake forms
• Anthropicthe chat assistant on this website
• Apple and Googleonly if you add your Rewards card to Apple Wallet or Google Wallet

Some of these companies store or process information outside Canada, including in the United States, where it may be accessed by courts and authorities under the laws there. We don't sell your information or share it for advertising.

Who can see it

Sarah Khan, through the studio's password-protected admin tools, and the person who maintains the website when technical support needs it. Sarah Khan is responsible for how Lashout handles personal information.

How long we keep it

We keep your client record, including your intake form and photos, while you're an active client, and delete it when you ask us to, unless the law requires us to keep something (for example, payment records for tax purposes).

Your choices

• Ask to see the information we hold about you.
• Ask us to correct anything that's wrong.
• Ask us to delete your information.
• Withdraw your photo consent, or change it on your next intake form.
• Stop texts at any time by replying STOP.

To make a request, email lashoutca@outlook.com or text (437) 365-4635. We'll reply within 30 days, as PIPEDA requires. If you're not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada.