Privacy Policy

Last updated November 6, 2026

Lash by Doye is a small lash studio in London, Ontario. When you book with me, you trust me with your details, and I take that seriously. This page explains what I collect, why I need it, and what choices you have.

What I collect

When you send an appointment request, I ask for:

• your name, phone number and email address
• the service you want
• your preferred date and time
• anything you choose to add in the notes

Notes are optional. You can use them to mention allergies or sensitivities. Please only share what you’re comfortable with and what will help me look after you.

I don’t take payment on this website. Payment is due when you arrive for your appointment, so the site never asks for your card details.

How I use your details

• to review your request and arrange your appointment
• to contact you by email, phone or WhatsApp about your booking
• to send a receipt and updates when your appointment is confirmed, moved, declined, cancelled or completed
• to keep track of my appointments and business records

I don’t sell your details, and I won’t add you to a marketing list because you booked.

Who else handles your details

I use a few trusted services to run this website. They only handle your details so the site can work:

• Supabase stores booking requests and secures the studio login.
• Resend delivers booking emails.
• Cloudflare hosts the site and helps protect it from spam and attacks.
• Google Fonts supplies the fonts on the site, so your browser connects to Google when a page loads.

If you message me on WhatsApp, WhatsApp’s own privacy terms apply to that chat. Some of these companies may store or process information outside Canada, where different privacy laws can apply.

I may also share information if the law requires it.

Cookies

I don’t use advertising cookies or tracking tools on this site. The studio login uses cookies to keep me signed in, and Cloudflare may use a security cookie to help tell real visitors from bots.

How long I keep your details

I delete booking details by hand about 30 to 90 days after your appointment is completed. You can ask me to delete them sooner. I may need to keep some records for longer if the law requires it.

Keeping your details safe

Booking requests are only available through a private, password-protected studio dashboard. No website can promise perfect security, but I work to keep your details protected and limit who can see them.

Your choices

You can ask to see the details I hold about you, correct anything that’s wrong, or withdraw your consent and have your details deleted. If you withdraw consent while a booking is open, I may not be able to complete it.

Age

Bookings are for clients aged 17 and older, so I don’t knowingly collect details from anyone younger. If you think someone under 17 has sent a request, let me know and I’ll delete it.

Contact me

For a privacy question or request, reply to any email you’ve received from Lash by Doye. If you’re not happy with how I’ve handled your request, you can contact the Office of the Privacy Commissioner of Canada.

Changes to this policy

If the way I handle your details changes, I’ll update this page and the date at the top.