Privacy Policy

Who we are

Xenoblox Beauty Atelier Sdn Bhd (Reg. 1612583-W) operates the lash and brow studio at Lot G-08 Sunway Pyramid Tower 2, Petaling Jaya. We act as the data controller for the personal information we collect through our website, our WhatsApp line, and our in-studio consultation forms.

What we collect, and why

We collect only what we need to deliver our services and reply to your enquiry:

• Booking enquiry data: your name, email, mobile number, the service you are interested in, and any free-text notes you choose to share. We need this to reply to you and to plan the session.
• Consultation data: eye shape, allergies, medication, prescription, lash and brow history. This is collected in writing at the studio with your signature, never via the website.
• Photographic records: before-and-after shots of your eye area, taken at every visit. These are stored against your file in our local studio system and are never published without a separate signed release form.
• Technical data: anonymised analytics (page views, device type, referrer) collected through a privacy-respecting analytics tool if you accept cookies.

How we use it

• To reply to your enquiry and propose a consultation slot.
• To schedule, prepare, and deliver your booked service.
• To send appointment reminders 24 hours ahead and a follow-up check-in within seven days of the service.
• To improve our service notes and aftercare guides, in aggregate.

How long we keep it

Booking enquiry data that does not lead to a booking is deleted within 180 days. Client records and photographic before-and-after pairs are kept for as long as you remain an active client and for two years after your last visit, then permanently deleted.

Who we share it with

We do not sell your information, and we do not share it with marketing partners. We share with:

• Our messaging provider (WhatsApp via Meta) when you choose to message us there.
• Our email provider to deliver our replies and reminders.
• The relevant Malaysian tax authority where required by law for invoiced services.

Your rights under the PDPA

You have the right to access the data we hold about you, to correct it, and to ask us to delete it. To exercise any of these rights, email [email protected]. We will respond within 30 days.

Children

Our services are intended for adults aged 18 and older. We do offer brow shaping for minors aged 14 and above with parental presence and signed consent in the studio. We do not knowingly collect online enquiry information from anyone under 18.

Security

Our website uses HTTPS, our internal client system runs on encrypted local storage, and our consultation forms are stored in a locked cabinet at the studio. Photographic records sit on an offline tablet that is wiped on rotation.

Contact

If you have any questions about how we handle your information, contact our data privacy officer at [email protected] or call +60 3-7892 5430.