Velour Lash Atelier Sdn. Bhd. (“Velour”, “we”, “us”) operates the website paintlink.help and the lash and brow studio at Plaza Mont' Kiara, Kuala Lumpur. This policy explains what personal data we handle and why, in line with the Malaysian Personal Data Protection Act 2010 (PDPA).
1. What we collect
We only collect what a booking genuinely requires:
- Booking details — your name, email address, optional mobile number, the treatment you are interested in, and anything you write in the notes field.
- Treatment records — for returning clients we keep brief notes about your lash map, adhesive used and any sensitivities, so your next appointment starts where the last one ended.
- Technical data — basic, aggregated visit statistics as described in our Cookie Policy. We do not build individual browsing profiles.
2. Why we collect it
We use your data to respond to booking requests, prepare for and carry out your treatment safely, remind you of upcoming appointments if you ask us to, and meet our legal record-keeping duties. We do not use your details for marketing lists, and we never sell or rent personal data to anyone.
3. Health and sensitivity information
If you volunteer information about allergies, sensitive eyes, pregnancy or past reactions, we record it solely to keep your treatment safe. This information is treated as sensitive personal data under the PDPA, is visible only to the artist team, and is never shared externally without your explicit consent.
4. Who can see your data
Access is limited to studio staff who need it to serve you. Our website hosting provider processes data on our behalf under contractual safeguards. Beyond that, we disclose personal data only where Malaysian law requires it — for example, to a regulator with proper authority.
5. How long we keep it
Booking enquiries that do not become appointments are deleted within six months. Client treatment records are kept for as long as you remain an active client and for two years afterwards, after which they are securely destroyed.
6. Your rights
Under the PDPA you may request access to the personal data we hold about you, ask us to correct it, or withdraw consent to further processing. Write to [email protected] with the subject line “Data request” and we will respond within 21 days. Withdrawing consent may mean we can no longer take bookings from you, but we will explain the consequences before acting.
7. Security
Form submissions travel over an encrypted connection, treatment records are kept in access-controlled systems, and paper consultation cards are stored in a locked cabinet at the studio. No system is perfect, but we treat your data with the same care we treat your eyes.
8. Contact
Questions about this policy can be sent to [email protected] or posted to Velour Lash Atelier Sdn. Bhd., Lot 2-08, Level 2, Plaza Mont' Kiara, 2 Jalan Kiara, Mont Kiara, 50480 Kuala Lumpur, Malaysia.