Your privacy.

Who is responsible

Nadiia Martyniuk operates Lash Glow at Avenida de Rodrigues de Freitas 199, 2.º andar frente, Porto, Portugal. For questions about your booking or personal data, contact @lashglow.nadiia on Instagram or write to the studio address.

What we collect and why

When you book, we collect your name, telephone number, selected treatments, appointment date and time, and the saved price and first-visit offer, if applicable. These details are necessary to arrange and manage your requested appointment. Without the required details, we cannot complete an online booking. We do not require a client account or online payment, and the form does not request health information.

We also process technical request information, such as IP addresses and error logs, to keep the booking service secure and prevent abuse. Appointment processing is necessary to take steps at your request and provide the booked service; security processing serves our legitimate interest in protecting the service. We do not use automated decisions that produce legal or similarly significant effects.

Notifications and service providers

Booking details are stored using MongoDB Atlas and processed by our hosting provider, Railway. The authorised people managing the studio receive booking details and your contact number in private Telegram chats. Your artist may use WhatsApp to confirm the appointment or discuss changes. Conversations in WhatsApp are not archived on this website. We do not offer automatic email confirmations in the current booking form.

If the artist connects Google Calendar, booking details may also be copied to a private calendar to manage availability. Service providers may process data outside the European Economic Area; contact us for information about the providers and applicable transfer arrangements. We do not sell your booking details or use them for advertising.

How long we keep information

We keep appointment information while needed to arrange and provide the service, handle changes or outstanding questions, resolve disputes, and meet applicable legal obligations. The criteria are whether an appointment or request remains open and whether a legal need for the record remains. Records should be removed when those purposes end. Copies in Telegram, WhatsApp or Google Calendar must also be considered when handling a deletion request; deleting a website record does not automatically remove those copies.

Your choices and rights

You can contact the studio to ask for access to your personal data, correction, deletion, restriction, or a portable copy where applicable. You may object to processing based on legitimate interests. We may need to verify that a request concerns your own booking. You can also complain to Portugal’s supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

Google Calendar connection for the artist

Only the artist signs in with Google. With permission, Lash Glow Booking receives the Google account identifier and verified email, stores the calendar identifier and an encrypted refresh token, and creates a separate Lash Glow calendar. The requested calendar.app.created permission allows the app to manage secondary calendars it creates and events on them; it does not request access to all personal calendars. The app uses this connection to add, update and remove booking and blocked-time events, without inviting clients as guests.

The artist can disconnect in the administration panel or revoke access in Google account settings. Disconnecting removes the stored refresh token and stops future synchronisation; existing Google events remain until removed from the calendar. Google account information is used for this integration, not advertising or AI model training.

Cookies and changes

This website does not use advertising or analytics tools. The separate artist administration uses a necessary sign-in cookie. Third-party services you open, such as Instagram, WhatsApp and Google Maps, apply their own privacy policies. This page will be updated if our booking process or providers change.