Privacy & data
Your trust matters. Here is exactly how we handle your information — and the control you have over it.
Who we are
Framed by Milly is a brow studio based in Bray, County Wicklow, Ireland. We are the data controller for the personal information you provide when booking and receiving treatments. You can reach us at hello@framedbymilly.com.
What we collect
Contact details (name, email, mobile, date of birth), booking details, medical and consultation answers relevant to your treatment, consent records (including digital signature, timestamp and IP address), patch test records, treatment history, photographs (only where you have consented), and payment status. Card details are processed securely by Stripe and never stored on our servers.
Why we process it
To provide treatments safely, manage your bookings and deposits, meet our duty of care and insurance obligations, send service communications and reminders, and — only with your explicit opt-in — marketing. Health information is processed on the basis of explicit consent and to protect your vital interests.
Data retention
Consultation, consent and patch-test records are retained for the period required by our insurer and applicable law (typically up to 7 years) to protect both you and the studio. Marketing preferences are kept until you withdraw consent. Other data is deleted when no longer needed.
Your rights
Under GDPR you have the right to access, rectify, export (portability), restrict, object to, and erase your personal data. Submit a request below — verified within the legal timeframe — or email us directly. Note that records we are legally required to keep (e.g. consent and medical records for insurance) may be retained even after a deletion request, but will be restricted from all other use.
Make a data request
We’ll verify your identity by email before actioning any request.