LASH DESIGN CHICAGO | PRIVACY POLICY
PRIVACY POLICY
Lash Design Chicago
Effective date
September 1, 2026
Last updated
September 1, 2026
Website
https://www.lashdesignchicago.com
This Privacy Policy explains how Lash Design Chicago ("Lash Design," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information when you visit our website, communicate with us, submit a form, join our mailing list, book or receive services, interact with our advertisements or social media, apply for a position, or otherwise engage with us.
This Privacy Policy applies to our website at https://www.lashdesignchicago.com, our River North and Lincoln Park studios, and related online and offline interactions that link to or refer to this Privacy Policy. It does not govern the independent privacy practices of Fresha, Google, Meta, Instagram, payment processors, or other third parties whose services you choose to use.
Please read this Privacy Policy carefully. By using our website or providing personal information to us, you acknowledge the practices described here. Where consent is required by law, we will request it separately and will not treat your use of the website alone as consent.
1. Who We Are
Lash Design Chicago is a Chicago beauty studio offering lash, brow, permanent makeup, nail, and related beauty services. We operate two locations:
River North: 770 N LaSalle Dr, Suite 200S, Chicago, IL 60654
Lincoln Park: 2337 N Clark St, Chicago, IL 60614
For privacy questions or requests, contact us using the details in Section 26.
2. Scope and Relationship to Third-Party Services
Our website may contain links, embedded content, maps, social media features, review widgets, and booking buttons that connect to third-party services. When you follow a link to Fresha or another third party, the third party may collect information directly from you under its own privacy policy and terms. We encourage you to review those policies before submitting information.
If information is collected by a third party on our behalf and returned to us, our handling of the information we receive is covered by this Privacy Policy. The third party's own collection and processing remain governed by its policy.
3. Personal Information We Collect
The information we collect depends on how you interact with us. We may collect the following categories of personal information.
3.1 Identity and contact information
Telephone number
Mailing or billing address when needed for a transaction
Preferred studio location
Social media username or profile information when you contact us through a social platform
3.2 Appointment, transaction, and client information
Requested and completed services, appointment dates and times, selected artist, location, service preferences, and appointment history
Consultation responses, intake information, suitability information, aftercare communications, and notes reasonably needed to provide a requested service
Purchase, deposit, cancellation, rescheduling, refund, discount, promotion, gift card, loyalty, and transaction history
Limited payment and transaction information received from Fresha or a payment processor, such as payment status, transaction identifier, amount, and card type. We generally do not receive or store complete payment-card numbers entered through an independent processor
3.3 Service-safety and sensitive information
For certain services, especially permanent makeup, brow, lash, or other treatments where suitability and safety matter, you may voluntarily provide information about allergies, sensitivities, skin or eye conditions, medications, pregnancy, prior procedures, reactions, contraindications, or other health-related circumstances. We collect only information reasonably relevant to the consultation or requested service. This information may be considered sensitive personal information under some laws.
Lash Design Chicago is a beauty-services business and is not representing that it is a health-care provider or a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). We nevertheless treat service-safety information with appropriate care and limit its use to legitimate service, safety, recordkeeping, and legal purposes.
3.4 Photographs, video, reviews, and user content
Before-and-after photographs, service-result images, videos, or other media taken with your permission
Reviews, testimonials, comments, messages, survey responses, and content you submit or authorize us to repost
Information associated with a photo or video, such as date, service, artist, or consent status
We do not use website photos to create facial-recognition templates and do not intentionally collect biometric identifiers through our website. If we ever introduce technology that collects biometric identifiers or biometric information as defined by applicable law, we will provide a separate notice and obtain any consent required before collection.
3.5 Communications and marketing information
Messages, emails, call records, voicemail, SMS or text messages, and correspondence with our team
Communication preferences, subscriptions, opt-ins, opt-outs, and consent records
Promotion responses, referral source, campaign information, and engagement with our emails, texts, advertisements, or social posts
3.6 Device, internet, and usage information
Internet Protocol address, browser type, device type, operating system, language, time zone, and approximate location derived from IP address
Pages viewed, links clicked, referring URL, exit page, dates and times of visits, session duration, and navigation behavior
Cookie identifiers, advertising identifiers, tag or pixel data, and information about interactions with advertisements
Technical logs, error information, security events, and data used to prevent fraud or abuse
3.7 Inferences
We may make limited inferences from the information above, such as likely service interests, preferred location, whether a promotion may be relevant, or whether a website visitor completed a booking. We do not use these inferences to make decisions that produce legal or similarly significant effects.
3.8 Job applicant and professional information
If you apply to work with us, we may collect your resume, employment history, training, licenses or certifications, portfolio, references, availability, and other information you choose to provide.
4. How We Collect Information
We may collect personal information from the following sources:
Directly from you, including through website forms, consultation forms, email signup, telephone, text, email, in-person visits, waivers, consent forms, surveys, and social media messages
From Fresha and other booking, scheduling, payment, customer-management, or communication providers used in connection with your appointment
Automatically from your browser or device through cookies, tags, pixels, analytics tools, server logs, and similar technology
From advertising and social media platforms, including information about campaign source, ad engagement, lead forms, and conversion events
From referral partners, gift purchasers, or another person who asks us to contact you, subject to applicable law
From public sources, such as publicly visible reviews or social media posts
5. How We Use Personal Information
We may use personal information to:
Respond to inquiries and consultation requests
Schedule, confirm, reschedule, cancel, and manage appointments
Provide lash, brow, permanent makeup, nail, and related services
Assess service suitability, document preferences, provide aftercare information, and support client safety
Process deposits, payments, discounts, refunds, gift cards, and other transactions
Send appointment confirmations, reminders, service updates, and administrative messages
Provide customer service and maintain client records
Send marketing communications where permitted, including news, special offers, new services, and rebooking reminders
Measure website traffic, campaign performance, form submissions, appointment clicks, and conversions
Personalize website content, offers, and advertising based on general interests and prior interactions
Maintain, troubleshoot, secure, and improve our website, booking experience, studios, services, and marketing
Detect, investigate, and prevent fraud, security incidents, misuse, or unlawful activity
Establish, exercise, or defend legal claims and enforce our terms, cancellation rules, and other policies
Comply with tax, accounting, licensing, recordkeeping, safety, court, law-enforcement, and other legal obligations
Evaluate job applicants and manage professional relationships
Complete a merger, financing, acquisition, sale, reorganization, or similar business transaction
6. Legal Bases for Processing
Where applicable law requires a legal basis, we rely on one or more of the following:
Performance of a contract or steps requested before entering a contract, such as arranging and providing an appointment
Legitimate interests, such as operating our business, communicating with clients, measuring performance, improving services, securing systems, and preventing fraud, when those interests are not overridden by your rights
Consent, such as for certain marketing communications, nonessential cookies, or use of photos for promotional purposes where required
Compliance with legal obligations, including tax, accounting, safety, recordkeeping, and lawful government requests
Protection of vital interests or important safety interests in limited circumstances
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that occurred before the withdrawal or processing supported by another lawful basis.
7. Website Forms and Lead Information
When you submit a website form, we may collect your name, email address, telephone number, preferred service, preferred location, appointment interest, message, and information needed to respond. We use this information to contact you about your request, help you select or book a service, apply an eligible promotion, and maintain a record of the interaction.
Submitting a request does not itself guarantee an appointment. Routine services may be booked directly through Fresha. Some services may require a consultation, suitability review, deposit, waiver, or additional consent before confirmation.
8. Booking and Payments Through Fresha
Our website links to Fresha for appointment booking and related functions. When you use Fresha, Fresha may collect your account, contact, appointment, service, payment, device, and communication information directly. Fresha may send booking confirmations, reminders, and other messages under its own terms and privacy policy.
We may receive from Fresha information needed to manage the client relationship, such as your name, contact details, appointment details, service history, notes, payment status, cancellations, and preferences. We do not control all of Fresha's independent processing. You should review Fresha's privacy policy and settings for details about its practices and your choices.
9. Cookies and Similar Technologies
Our website and service providers use cookies, tags, pixels, local storage, scripts, and similar technologies. Some are necessary for the website to function. Others help us understand traffic, remember preferences, measure advertising, and show more relevant ads.
9.1 Categories of cookies and technologies
Strictly necessary technologies support core functions, security, network management, form operation, and user choices
Functional technologies remember settings and improve convenience
Analytics technologies help us understand visits, pages viewed, traffic sources, and website performance
Advertising technologies help measure campaigns, attribute bookings or form submissions, limit repeated ads, create audiences, and deliver interest-based advertising
Our website is hosted using Squarespace technology and currently uses Google Tag Manager. Depending on our configuration, Google Tag Manager may load services such as Google Analytics, Google Ads conversion tags, Meta Pixel, or similar analytics and advertising tools. These providers may receive device, browser, cookie, page-view, referral, campaign, and conversion information. They may combine information with data associated with your account or activity on their services as described in their own privacy policies.
A tag-management system is a tool for deploying and managing other website tags. Its presence does not necessarily mean that every possible analytics or advertising tag is active on every page.
9.3 Your cookie choices
Where required, we provide a cookie or consent control that allows you to accept or reject nonessential technologies. You may also block or delete cookies through your browser. Blocking cookies may affect website features. Your choices may be specific to the browser and device you use, so you may need to repeat them on other browsers or devices.
10. Analytics and Advertising
We may use analytics and advertising services to understand how people find and use our website, evaluate advertising performance, measure actions such as form submissions and clicks to Fresha, create or exclude advertising audiences, and deliver ads to people who may be interested in our services.
Some privacy laws use terms such as "sale," "sharing," "targeted advertising," or "cross-context behavioral advertising" for certain disclosures of identifiers and internet activity to advertising partners, even when no money is exchanged. We do not sell personal information for money. To the extent our use of advertising technologies is treated as a sale, sharing, or targeted advertising under applicable law, you may opt out as described in Sections 17 and 18.
11. Email, SMS, Telephone, and Direct Marketing
11.1 Transactional and service communications
We or Fresha may contact you about an inquiry, consultation, appointment, payment, schedule change, aftercare, safety issue, or other service-related matter. These communications are not promotional merely because they relate to a commercial relationship.
11.2 Promotional email
If you subscribe or otherwise provide any consent required by law, we may send promotional emails about offers, services, events, and news. You can unsubscribe through the link in a promotional email or contact us. We may retain a limited suppression record so that we do not send promotional email after you opt out. Administrative or service-related emails may continue when necessary.
11.3 Promotional text messages and calls
We will send marketing text messages or make marketing calls only as permitted by applicable law and based on the consent required for the technology used. Consent to marketing is not a condition of purchasing services. Message frequency may vary. Message and data rates may apply. You may opt out of marketing texts by replying STOP. For help, reply HELP or contact us. We will honor legally valid revocation requests within the time required by law.
A request to stop marketing does not prevent us from sending a necessary one-to-one response or appointment-related message where permitted, although you may ask us to use a different communication channel.
12. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients for the purposes described in this policy:
Booking and client-management providers, including Fresha
Website hosting, form, cloud storage, email, SMS, telephone, and technical service providers
Payment processors, banks, fraud-prevention providers, and accounting services
Analytics and advertising providers, which may include Google and Meta depending on our configuration
Our employees, artists, contractors, and authorized personnel who need the information to perform their roles
Professional advisors, including attorneys, accountants, insurers, auditors, consultants, and information-security providers
Government agencies, regulators, courts, law enforcement, or other parties when required or permitted by law
A buyer, investor, lender, successor, or advisor in connection with an actual or proposed business transaction
Other parties at your direction or with your consent
We may also disclose aggregated or de-identified information that cannot reasonably be linked to you. We will not attempt to re-identify information that we maintain as de-identified except to test whether our de-identification processes are effective or as otherwise permitted by law.
13. Service Providers and Their Responsibilities
We select service providers to help operate our business and expect them to handle information consistently with their contractual and legal obligations. Where required, we use contracts that address confidentiality, security, permitted processing, assistance with rights requests, and data deletion or return. Some providers, particularly advertising, social media, booking, and payment platforms, may also act as independent businesses for certain processing and may determine their own purposes and means of processing.
14. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining business and tax records, handling disputes, enforcing agreements, documenting consent and opt-outs, protecting safety and security, and complying with law. Retention periods vary by information type and context. Typical guidelines include:
Inquiry and lead records: generally up to 24 months after the last meaningful interaction, unless the person becomes a client or a longer period is reasonably needed
Appointment, service, consultation, consent, and client records: generally for the active client relationship and up to 7 years afterward when reasonably needed for business, safety, insurance, accounting, or legal purposes
Transaction, tax, refund, and accounting records: generally up to 7 years or longer if required by law
Marketing records: until you unsubscribe or we discontinue the program, plus a limited suppression record retained as needed to honor your choice
Consent and revocation records: for as long as relevant to the communication program and afterward for a reasonable period to demonstrate compliance
Website analytics, cookie, and security logs: according to the settings of the relevant platform, generally from a few months to 26 months unless a shorter or longer period is justified
Applicant records: generally up to 3 years after the hiring decision, unless a longer period is required or reasonably necessary
Photos and promotional content: for the duration of the permission granted and our legitimate business use, subject to withdrawal rights, existing printed materials, archived records, and legal requirements
These periods are general guidelines, not promises that every record will be kept for exactly that time. We may delete information earlier when it is no longer needed or retain it longer when required by law, litigation hold, safety concern, dispute, investigation, or other legitimate need. Backup copies may remain for a limited period until overwritten through ordinary system cycles.
15. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, destruction, use, modification, or disclosure. Measures may include access controls, account authentication, vendor review, staff confidentiality obligations, secure payment processing, software updates, backups, and limiting access to personnel with a legitimate need.
No website, network, storage system, or transmission is completely secure. We cannot guarantee absolute security. You are responsible for protecting passwords and account credentials used with third-party services and for notifying us if you suspect unauthorized activity involving information you shared with us.
16. Data Breach Response
If we discover a security incident involving personal information, we will investigate, take reasonable steps to contain and remediate it, work with affected service providers, and provide notices to individuals, regulators, consumer-reporting agencies, or others when required by applicable law. Illinois law requires reasonable security measures for records containing personal information and notice to affected Illinois residents following certain breaches.
17. Your Privacy Choices
Appointment and contact information: You may choose not to provide certain information, but we may be unable to answer a request, confirm an appointment, or safely provide a service without information that is necessary
Email marketing: Use the unsubscribe link in a promotional email or contact us
Text marketing: Reply STOP or contact us
Cookies: Use our cookie controls where available or change your browser settings
Interest-based advertising: Use platform settings, browser controls, recognized opt-out mechanisms, or a legally required opt-out link where available
Photos and testimonials: Decline promotional use or withdraw permission for future use by contacting us, subject to applicable law and practical limitations described in the consent you provided
Account or Fresha settings: Manage information and preferences through Fresha when the information is controlled by Fresha
18. Global Privacy Control and Do Not Track
Some browsers and extensions send a Global Privacy Control (GPC) signal. Where applicable law requires us to treat a recognized GPC signal as a request to opt out of sale, sharing, or targeted advertising, we will process it for the browser or device from which the signal is received. Because the signal may not identify you, it may not apply across other devices, browsers, or offline records.
Traditional Do Not Track signals are not governed by a uniform industry standard. Unless required by law, our website may not respond to Do Not Track signals. You can still use the choices described in this policy.
19. Privacy Rights Where Applicable
Depending on where you live and whether the relevant privacy law applies to Lash Design Chicago, you may have rights concerning your personal information. These may include the right to:
Confirm whether we process your personal information and obtain access to it
Request correction of inaccurate personal information
Request deletion of personal information, subject to legal exceptions
Obtain a portable copy of certain personal information
Opt out of sale, sharing, targeted advertising, or certain profiling
Limit certain uses or disclosures of sensitive personal information
Withdraw consent where processing is based on consent
Appeal a denial of a privacy request where applicable
Receive equal service and not be unlawfully discriminated against for exercising a privacy right
These rights are not absolute. Applicable law may allow or require us to deny or limit a request, including where we need information to provide a service, complete a transaction, protect security, comply with law, preserve legal claims, or maintain a suppression record.
19.1 How to submit a request
Submit a request by emailing hello@lashdesignchicago.com with the subject line "Privacy Request" or by calling (773) 799-8389. Describe the right you want to exercise and provide enough information for us to identify relevant records. Do not send full payment-card information, government identification numbers, or unnecessary sensitive details by ordinary email.
19.2 Verification
We will verify requests to a level appropriate to the nature of the request and the sensitivity of the information. We may ask you to confirm information already associated with your records, respond from a known email address or telephone number, or provide a signed declaration. If we cannot verify your identity or authority, we may deny the request as permitted by law.
19.3 Authorized agents
Where permitted, you may use an authorized agent. We may require proof that the agent has permission to act for you and may ask you to verify your identity or confirm the request directly.
If applicable law gives you a right to appeal our decision, reply to our decision or email hello@lashdesignchicago.com with the subject line "Privacy Appeal." Explain why you believe the decision should be reconsidered.
20. Children's Privacy
Our website is not directed to children under 13, and we do not knowingly collect personal information online from children under 13. If we learn that we collected such information without legally valid parental authorization, we will take reasonable steps to delete it.
Services for minors may be subject to age restrictions, parental or guardian consent, artist discretion, booking-platform rules, and service-specific safety requirements. A parent or guardian who believes a child provided information improperly should contact us.
21. Photos, Testimonials, Reviews, and Social Media
We may ask for permission to photograph or record service results and use approved content on our website, portfolio, social media, advertising, or educational materials. Any media release or consent presented to you controls the specific scope of that use. Declining promotional use will not affect your eligibility to purchase ordinary services.
Content posted publicly on social media or review platforms may be visible, copied, or used by others beyond our control. If you tag us, mention us, submit a review, or send content with a request to repost it, we may respond or request permission to share it. Removing content from our own active channels may not remove copies, reposts, cached versions, archives, or previously printed materials.
22. Third-Party Links, Maps, Widgets, and Social Features
Our website may link to or display content from Fresha, Google Maps, Google reviews, Instagram, or other third parties. These services may recognize you, place cookies, collect device and usage information, or receive information when you interact with their features. We do not control their independent privacy practices. Links are provided for convenience and do not make us responsible for a third party's privacy, security, content, or terms.
23. Automated Decision-Making
We may use automated tools for routine functions such as spam filtering, campaign attribution, audience selection, appointment reminders, or fraud detection. We do not currently use solely automated processing to make decisions about you that produce legal or similarly significant effects. If that changes, we will provide any notice and rights required by applicable law.
24. Business Transfers and Legal Requests
We may disclose or transfer personal information as part of an actual or proposed merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction. A recipient may use the information subject to this Privacy Policy unless you are notified of a material change or applicable law requires additional choice.
We may preserve, use, or disclose information when we reasonably believe it is necessary to comply with law or legal process; respond to lawful requests; protect clients, personnel, or the public; investigate fraud or security incidents; enforce agreements; or establish, exercise, or defend legal claims.
25. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, vendors, business practices, or legal requirements. We will post the updated version on this page and change the "Last updated" date. If a change is material, we may provide additional notice through the website, email, booking communications, or another appropriate method. Any change applies from the effective date stated in the updated policy, subject to applicable law.
26. Contact Us
For questions, concerns, or privacy requests, contact:
Lash Design Chicago
Email: hello@lashdesignchicago.com
Telephone: (773) 799-8389
River North: 770 N LaSalle Dr, Suite 200S, Chicago, IL 60654
Lincoln Park: 2337 N Clark St, Chicago, IL 60614
Website: https://www.lashdesignchicago.com
We will make reasonable efforts to respond within the period required by applicable law. For booking changes or urgent appointment matters, please use our ordinary booking or contact channels rather than a privacy request.
27. No Waiver of Applicable Rights
Nothing in this Privacy Policy is intended to limit rights that cannot legally be waived or to authorize a use or disclosure prohibited by law. If a provision conflicts with applicable law, the law controls to the extent of the conflict.