What we knowabout you.

Flawless Esthetics is a beauty studio at 7th Avenue Plaza, 43 Constant Spring Road, Half Way Tree, Kingston 10, St. Andrew, Jamaica. This policy covers this website and the bookings, orders and accounts made through it.

We are the data controller for everything described here. For any question about your information, or to make any of the requests in section 7, write to hello@flawlessestheticsja.com or message the studio on WhatsApp.

When you book a treatment

Your name, email address, the treatment, the date and time, and, if you give them, your phone number and any note you write for the studio. The note is free text, so please put only what the studio needs to know to treat you safely.

When you sign in

Sign-in is handled by Google. Google tells us your name, email address and profile picture, and nothing else. We never see, receive or store your Google password.

When you send a deposit or pay for an order

The receipt you upload, which is an image or a PDF from your own banking app, and any note you attach to it. We keep the booking reference so the studio can match your transfer to your appointment.

What we never collect

We do not take card numbers, CVV codes or online banking logins, and there is nowhere on this site to enter them. Every payment is a bank transfer that you make yourself, in your own bank’s app. If any page ever asks you for card details, it is not us. Close it and tell the studio.

We do not buy information about you, build advertising profiles, or track you across other websites.

To give you the appointment you asked for, and to run the studio around it. Specifically:

• To hold your slot, and to know who is in the chair and for what.
• To send you a confirmation with your reference, and to reach you if something about your appointment has to change.
• To match a bank transfer to a booking, which is the only way the studio can tell whose deposit has arrived.
• To keep an accurate record of takings, which a business is required to keep.
• To treat you safely. A note about a skin condition, an allergy or a past reaction is kept so nobody has to remember it.

We do not send marketing email. If that ever changes we will ask you first, and you will be able to say no without it affecting your booking.

The studio, and a small number of service providers that run the machinery underneath this site. Each one only handles what it needs to do its job:

• Our hosting provider, which runs the website itself.
• Our booking system, which stores the appointment diary and the receipts you upload.
• Our email provider, which sends your confirmation. It receives your email address and what the message says.
• Google, which handles sign-in if you choose to use it.

They are bound by contract to act only on our instructions. Ask and we will tell you which companies these are.

These providers store data on servers outside Jamaica, mainly in the United States. They act on our instructions and may not use your information for their own purposes.

We do not sell your information, and we do not share it with advertisers or data brokers. We would only hand it to anybody else if the law required it.

• Appointments and orders: kept while you are a client and for seven years afterwards, because they are business records and tax records.
• Payment receipts: kept with the booking they belong to, for the same period.
• Your account: kept until you ask us to close it.
• Notes about your skin: kept while you are a client, so the studio does not have to ask you the same questions every visit. Ask and we will remove them.

You can ask us to delete anything we are not legally required to keep. See section 7.

The diary and the receipts are not public and cannot be read directly from the internet. The database refuses every connection except from this site’s own server, which checks who is asking before it answers.

Uploaded receipts live in a private store. The studio views one through a link that is generated on request and expires shortly afterwards; there is no permanent public address for your receipt. The whole site is served over HTTPS.

No system is perfect. If anything ever happened to your information we would tell you, and the Information Commissioner, without delay.

Under Jamaica’s Data Protection Act, 2020, you may ask us to:

• Tell you what we hold about you, and give you a copy.
• Correct anything that is wrong.
• Delete what we hold, where we are not required to keep it as a business record.
• Stop using it in a particular way, or object to a use.

Write to hello@flawlessestheticsja.com. We will answer within 30 days and we will not charge you for it. We may ask you to confirm who you are first, so that nobody else can request your records.

If you are not satisfied with how we have handled it, you may complain to the Office of the Information Commissioner of Jamaica.

Three, at most, and every one of them is there to make signing in work safely:

• A security token, set the first time you load any page. It is what stops another website from submitting a sign-in in your name.
• A return address, so that signing in brings you back to the page you were on rather than the front page.
• A session cookie, set only once you actually sign in. It keeps you signed in as you move between pages, and signing out removes it.

All three are marked so that only our server can read them, never a script running in the page, and they are never sent to another website.

There are no analytics, advertising or tracking cookies on this site, and nothing here follows you anywhere else. Those three are what the law calls strictly necessary, which is why you are not being made to click a cookie banner: there is nothing optional to consent to.

This site is not intended for children under 16, and we do not knowingly collect their information. Where a treatment is booked for a young person, we expect a parent or guardian to make the booking and to be present. If you believe a child has given us information, tell us and we will remove it.

If this changes, the date at the top changes with it and the new version replaces this one from the day it appears here. If a change materially affects what we do with information we already hold, we will tell you directly rather than leaving you to notice.

Email hello@flawlessestheticsja.com, message the studio on WhatsApp, call +1 (876) 367-6110, or use the contact form.

7th Avenue Plaza, 43 Constant Spring Road, Half Way Tree, Kingston 10, St. Andrew, Jamaica.