GOT BROWED · CLIENT CARE

Consultation Privacy Policy

YOUR INFORMATION, HANDLED WITH CARE

PRIVATE • CONFIDENTIAL • CLIENT FOCUSED

A little care, behind the scenes.

At Got Browed, your privacy matters. This notice explains how we collect, use, store, and protect the information you provide in our Brow Services, Brow Lamination, and Lash Services consultation forms. Please read it before completing your consultation.

Last updated: 11 November 2026 · This notice covers consultation records, not general online shopping.

01 Who is responsible for your information?

Got Browed is a sole-owner beauty business based at Innovation House, 46 Reid Street, Hamilton, Bermuda. The owner is responsible for the consultation records collected through this website and is your contact for privacy questions and requests.

Phone: +1 (441) 777-5052
Email: gotbrowed@gmail.com.

02 What information do we collect?

Depending on your selected treatment, your consultation may ask for:

  • Contact and booking details: full name, date of birth, phone number, email address, appointment date, selected service, emergency contact details, and referral source.
  • Treatment and health information: allergies, skin or eye concerns, relevant medications or skincare products, previous treatments, pregnancy/breastfeeding disclosures, patch-test information, and treatment preferences.
  • Consent and records: your answers, agreement selections, optional photo/video permission, digital signature, submission date, and the version of the consent presented.
  • Owner-only treatment notes: suitability decisions, products used, patch-test observations, treatment details, and follow-up notes entered in our private dashboard.

We also use Cloudflare Turnstile security verification, which may process browser/device and security signals to distinguish genuine visitors from automated traffic.

03 Why do we use this information?

We use consultation information to:

  • match your form to your appointment and contact you about your booking;
  • assess whether your treatment is suitable, identify contraindications, and discuss patch tests or necessary precautions;
  • plan, perform, and document the agreed service and any aftercare or follow-up;
  • maintain a record of your consent, protect client safety, and respond to disputes, insurance matters, or legal obligations;
  • use emergency contact details if a relevant incident requires us to reach someone you have nominated.

Your consultation health answers are not collected for social-media marketing. Optional photography permission is handled separately, as described below.

04 Sensitive information and your choices

Some answers relate to your health and may be sensitive personal information under Bermuda's Personal Information Protection Act 2016 (PIPA). We ask for information relevant to the safety and suitability of your treatment. If you prefer not to provide information needed for a safe assessment, we may be unable to proceed with that service.

Please provide accurate information and tell us if it changes. If you provide an emergency contact, please let that person know you have shared their details for this limited purpose.

05 Photos and videos are optional

Your form asks separately whether Got Browed may use treatment photos or videos for a portfolio, website, or social media. Saying No will not affect your appointment. Only the uses you choose to authorize are permitted, and you may contact us to withdraw permission for future use.

Withdrawal does not necessarily remove material already lawfully published or shared before your request, but we will review reasonable removal requests.

06 Where information goes and who may receive it

Your consultation page is displayed on our Shopify website. When you submit, your consultation answers and drawn signature are sent to our Cloudflare Worker and saved in our Cloudflare D1 database. The owner accesses submissions through a separately protected administrative dashboard. Cloudflare also provides Turnstile verification.

These technology providers may process personal information outside Bermuda, and processing locations depend on their services and our configuration. Cloudflare is a US-based service provider; overseas processing may involve the United States and other locations. We will assess relevant recipients and safeguards under Bermuda's requirements before relying on overseas processing for live client records.

We may also disclose information if legally required, to respond to an emergency, or to professional advisers or insurers where reasonably necessary and lawful. We do not make your consultation records publicly accessible.

07 Security and retention

We use security measures intended to protect consultation records, including HTTPS transmission, Cloudflare database encryption, and login restrictions on the owner dashboard. No online system can guarantee absolute security.

We keep records only for as long as needed for treatment safety, follow-up appointments, legitimate business records, and applicable legal, insurance, or dispute-related obligations. We review records and delete or de-identify information when it is no longer required, subject to applicable obligations.

08 Your privacy rights

Subject to applicable law and exemptions, you may ask to access your personal information, correct inaccurate information, or request that certain uses be blocked or that information be erased or destroyed. You may also ask about the purposes for which information is used and to whom it has been disclosed.

To make a request, contact the owner using the details below and identify the consultation or appointment involved. We may need to verify your identity before responding, especially because consultation records can include sensitive information.

09 Questions, concerns, and changes

If you have a privacy concern, please contact Got Browed first so it can be reviewed. You also have the option to raise concerns with the Office of the Privacy Commissioner for Bermuda.

If our information practices change, we may update this notice and show a revised date. Important changes that affect submitted information may require further notice or consent.