WM PERMANENT MAKEUP WIOLETTA MALOCHLEB
Effective Date: 22 July 2026 Last Updated: 22 July 2026
Introduction
Welcome to **WM PERMANENT MAKEUP WIOLETTA MALOCHLEB** (“WM Permanent Makeup”, “we”, “our”, or “us”).
At WM Permanent Makeup, protecting your privacy is just as important as providing safe, high-quality permanent makeup treatments. We understand that when you trust us with your personal information – including sensitive health information – you expect it to be handled with professionalism, confidentiality and care.
This Privacy Policy explains: (what personal information we collect; why we collect it; how we use it; how we protect it; who we may share it with; how long we keep it; the choices and rights available to you under UK data protection law.
We are committed to processing your personal information fairly, lawfully and transparently, while respecting your privacy at every stage of your interaction with us.
About Us
WM PERMANENT MAKEUP WIOLETTA MALOCHLEB is an independent permanent makeup studio based in London, specialising in natural-looking cosmetic tattoo treatments and professional eyebrow services tailored to each client’s individual features, skin type and aesthetic goals.
Our services include, but are not limited to:
* Permanent Eyebrows
* Lip Blush
* Lash Enhancement
* Permanent Makeup Corrections
* Permanent Makeup Colour Boost Treatments
* Laser Permanent Makeup Removal
* Chemical Permanent Makeup Removal
* HD Brows
* Brow Lamination
* Eyebrow Shaping
* Consultations
As permanent makeup involves cosmetic tattooing and skin penetration, we are required to collect certain personal information, including relevant health information, before carrying out a treatment.
This information enables us to assess whether a treatment is appropriate and safe for you, identify any contraindications, maintain accurate treatment records, provide appropriate aftercare, and fulfil our professional, legal and insurance obligations.
For non-invasive treatments, such as HD Brows, Brow Lamination and Eyebrow Shaping, we only collect the personal information necessary to provide the requested service safely and professionally.
We only collect information that is relevant and necessary for these purposes and always handle your personal information with the highest standards of confidentiality, professionalism and care.
Data Controller
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller responsible for your personal information is:
WM PERMANENT MAKEUP WIOLETTA MALOCHLEB
40 Moreton Street
Pimlico
London
SW1V 2PB
United Kingdom
Email: wioletta@wmpermanent.uk
Telephone: +44 (0) 7476 691934
Website: https://wmpermanent.uk
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us using the details above.
Who This Privacy Policy Applies To
This Privacy Policy applies to anyone who interacts with WM Permanent Makeup, including individuals who: visit our website; contact us by email, telephone or social media; submit an enquiry through our website; book an appointment; attend a consultation; receive a treatment; subscribe to our newsletter; purchase gift vouchers or services; communicate with us before or after treatment.
It applies whether you contact us online, in person or by telephone.
What Personal Information We Collect
The information we collect depends on the nature of your interaction with us.
Personal Identification Information
We may collect: full name; date of birth; age confirmation where required; email address; telephone number; postal address (where required); emergency contact details (if voluntarily provided).
Appointment Information
When you book an appointment, we may collect booking reference; treatment selected; preferred appointment date and time; appointment history; cancellation or rescheduling history; booking notes; deposit information; payment status.
Consultation Information
Before carrying out any permanent makeup treatment, we ask clients to complete a consultation.
This may include information about previous permanent makeup; previous cosmetic procedures; skincare routine; allergies; lifestyle factors relevant to treatment; expectations and treatment goals.
Health Information (Special Category Data)
Because permanent makeup is an invasive cosmetic treatment, we may need to collect certain health information to determine whether treatment is appropriate and safe.
Depending on the treatment, this may include information relating to: pregnancy or breastfeeding: diabetes; autoimmune conditions; allergies; medications; blood clotting disorders; skin conditions; recent aesthetic procedures; previous cosmetic tattooing; healing disorders; history of cold sores (for lip treatments); infectious conditions relevant to treatment safety; other medical information relevant to contraindications.
We only request information that is necessary for assessing your suitability for treatment.
Health information is treated as confidential and receives additional protection under applicable data protection legislation.
Treatment Records
To maintain accurate professional records, we may also collect: treatment notes; pigment colours used; procedure details; patch test information; treatment dates; aftercare recommendations; healing observations; touch-up history; consent records.
These records form part of your confidential client file.
Clinical Photographs
Professional photographs may be taken before treatment; during treatment; immediately after treatment; during review appointments; after healing.
These photographs help us: document your treatment; monitor healing; assess colour retention; compare results over time; provide continuity of care; maintain accurate treatment records.
Clinical photographs form part of your confidential treatment record.
If we would like to use photographs for marketing purposes, including our website, social media channels or educational materials, we will always ask for your separate, explicit consent.
Refusing consent for marketing photographs will never affect your treatment.
You may withdraw your marketing consent at any time.
Payment Information
Payments may be made through Stripe via our online booking system; by bank transfer; in person using accepted payment methods.
We do **not** store your full debit or credit card details.
Online payments are processed securely by Stripe in accordance with its own Privacy Policy.
Information Collected Automatically
When you visit our website, certain technical information may be collected automatically.
This may include IP address; browser type; operating system; device information; pages viewed; time spent on pages; referring website; approximate geographic location; interactions with website features; cookie identifiers.
This information helps us maintain website security, improve user experience and understand how visitors use our website.
Non-essential technologies are activated only after you provide consent through our CookieYes cookie banner.
How We Collect Your Information
We collect information in several ways.
information you provide directly
You may provide information when you: complete a contact form; book an appointment; subscribe to our newsletter; complete consultation forms; sign treatment consent forms; contact us by email or telephone; communicate with us through Instagram or Facebook; send photographs relating to your treatment; request advice before or after treatment.
Information collected automatically
Certain technical information is collected automatically through cookies and similar technologies used on our website.
Information from trusted third parties
We may also receive limited information from trusted providers that help us operate our business, including: Acuity Scheduling; Stripe; Google Analytics; Meta Platforms; website hosting providers; IT support providers.
We only receive information that is necessary for the services they provide to us.
Why We Use Your Personal Information
We only use your personal information where we have a valid reason to do so. The information we collect allows us to provide safe, professional and efficient services while meeting our legal and regulatory obligations.
We may use your personal information to: respond to your enquiries; arrange consultations and appointments; provide permanent makeup treatments; assess whether a treatment is suitable and safe for you; maintain accurate treatment records; provide aftercare advice; arrange review or colour boost appointments; process deposits and payments; communicate with you about your appointments; send appointment reminders; improve our services and customer experience; manage and protect our business; comply with legal, tax and insurance obligations; establish, exercise or defend legal claims where necessary.
We will only use your information for the purposes explained in this Privacy Policy or where otherwise permitted by law.
Our Legal Basis for Processing Personal Information
UK data protection law requires us to have a lawful basis whenever we process personal information.
Depending on the circumstances, we rely on one or more of the following legal bases.
Performance of a Contract
Most of the information we process is necessary to: arrange consultations; book appointments; carry out treatments; communicate with you regarding your appointments; provide aftercare support; manage payments and deposits.
Without certain information, we may be unable to provide our services safely.
Legal Obligations
We are required to process certain information to comply with legal obligations, including:
accounting and tax legislation; health and safety requirements; insurance requirements; fraud prevention; responding to lawful requests from public authorities.
Legitimate Interests
In some situations, we process information because it is necessary for the legitimate interests of our business.
These interests include improving our services; maintaining accurate business records; protecting our business against fraud; improving website performance; responding to enquiries; maintaining the security of our systems; handling complaints; managing customer relationships.
Whenever we rely on legitimate interests, we carefully consider your rights and privacy.
Consent
We rely on your consent where required by law.
For example, we ask for your consent before sending marketing emails; sending newsletters; using non-essential cookies; using Meta Pixel and certain analytics technologies; publishing your photographs for marketing purposes.
You may withdraw your consent at any time.
Withdrawing consent does not affect any processing that took place before consent was withdrawn.
Health Information
As a permanent makeup practitioner, we are responsible for ensuring that treatments are appropriate and safe.
For this reason, we may ask you to provide health information before your appointment.
Health information receives additional protection under UK data protection legislation.
We only collect information that is relevant to your treatment.
Your health information is used to: identify contraindications; assess treatment suitability; reduce health risks; provide appropriate aftercare; comply with professional and insurance requirements; protect both you and our business should any concerns arise following treatment.
Health information is never used for marketing purposes.
We never sell or rent health information.
Online Booking (Acuity Scheduling)
Appointments can be booked through **Acuity Scheduling**.
When making a booking, you may be asked to provide information including: your full name; email address; telephone number; selected treatment; appointment preferences; booking notes where relevant.
This information is used solely for managing appointments and providing our services.
Acuity Scheduling processes information on our behalf and has its own Privacy Policy, which explains how it handles personal information.
Payments
We accept payment: online through **Stripe**; by bank transfer; in person using accepted payment methods.
Online card payments are securely processed by Stripe.
We do not have access to your full payment card details and do not store them on our own systems.
Payment information is used only for processing transactions, confirming bookings and meeting accounting and legal obligations.
Communication with You
We may contact you regarding appointment confirmations; appointment reminders; consultation requests; treatment preparation; aftercare advice; colour boost appointments; responses to your enquiries; important administrative information relating to your booking.
These communications are necessary for providing our services and are not considered marketing communications.
Marketing Communications
From time to time, we may send newsletters or information about new treatments; special offers; clinic updates; beauty advice; educational content; promotions.
We will only send marketing communications were permitted by law.
You can unsubscribe at any time by clicking the unsubscribe link included in our emails; or contacting us directly.
Once you unsubscribe, you will no longer receive marketing emails.
However, we may still send service-related communications, such as appointment confirmations or aftercare information.
Cookies
Our website uses cookies and similar technologies to ensure that it functions correctly and to improve your browsing experience.
We use **CookieYes** to manage cookie preferences.
When you first visit our website, you can choose to: accept all cookies; reject non-essential cookies; customise your cookie preferences.
You can change your preferences at any time using the cookie settings available on our website.
We use different categories of cookies, including:
Strictly Necessary Cookies
These cookies are essential for the operation and security of our website.
Because they are necessary, your consent is not required.
Functional Cookies
these cookies remember your preferences to improve your browsing experience.
Analytics Cookies
With your consent, analytics cookies help us understand how visitors use our website.
Marketing Cookies
With your consent, marketing cookies help us measure the effectiveness of advertising campaigns and show more relevant advertisements.
Further information is available in our separate Cookie Policy.
Google Analytics
We use **Google Analytics 4 (GA4) to understand how visitors use our website.
Google Analytics may collect information such as: pages visited; time spent on pages; browser type; device information; approximate location; website interactions.
This information helps us improve our website and services.
Google Analytics is activated only after you provide consent through our cookie banner, where required by law.
Meta Pixel
We use **Meta Pixel** to measure the effectiveness of advertising campaigns on Facebook and Instagram.
Meta Pixel helps us understand which pages visitors view; which services are most popular; whether visitors complete bookings after viewing our advertisements.
This information helps us improve our marketing and reach people who may be interested in our services.
Meta Pixel is used only where you have provided the necessary consent through our cookie settings.
Social Media
We maintain business pages on platforms including Instagram and Facebook.
If you contact us through social media, the information you provide may be processed by both WM Permanent Makeup and the relevant platform.
Please avoid sending sensitive medical information through social media messaging services whenever possible.
If necessary, we may ask you to continue the conversation by email or through another secure method.
Your use of social media platforms is also subject to the privacy policies of those providers.
Sharing Your Personal Information
We respect your privacy and never sell your personal information.
We will only share your information where it is necessary to provide our services, operate our business or comply with legal obligations.
Depending on the circumstances, your personal information may be shared with trusted service providers, including: Acuity Scheduling (appointment management); Stripe (payment processing); website hosting providers; IT support providers; Google (analytics services); Meta Platforms (advertising services); email marketing providers; professional advisers, including accountants, insurers and legal advisers; regulatory authorities where required by law.
All third-party providers are expected to process personal information securely and only for authorised purposes.
Where required, appropriate contractual safeguards are in place to protect your personal information.
International Transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where this happens, we take reasonable steps to ensure that your information continues to receive an appropriate level of protection in accordance with UK data protection law.
Where required, we rely on recognised transfer mechanisms or other appropriate safeguards before personal information is transferred internationally.
Keeping Your Personal Information Secure
We take the security of your personal information seriously.
We use appropriate technical and organisational measures designed to protect your information from accidental loss, unauthorised access, misuse, disclosure, alteration or destruction.
These measures may include password-protected systems; secure electronic storage; encrypted services where available; restricted access to client records; secure communication with trusted service providers; regular software updates; appropriate cybersecurity practices.
Although we work hard to protect your information, no electronic transmission or storage system can be guaranteed to be completely secure.
If we become aware of a personal data breach that is likely to present a risk to your rights and freedoms, we will respond in accordance with our legal obligations.
How Long We Keep Your Personal Information
We retain personal information only for as long as it is reasonably necessary for the purposes set out in this Privacy Policy or to comply with legal, accounting, regulatory and insurance requirements.
Examples of typical retention periods include:
When personal information is no longer required, it will be securely deleted, anonymised or otherwise disposed of in a secure manner.
Your Privacy Rights
Under UK data protection law, you have several important rights.
The retention periods for different types of information generally include:
- Website enquiries: up to 12 months from the date of your enquiry.
- Appointment records: normally up to 7 years after your last appointment.
- Consultation and treatment records: normally up to 7 years after your last appointment, or longer where reasonably necessary to comply with legal, regulatory or insurance requirements.
- Clinical photographs: retained as part of your confidential treatment record for the same retention period as your consultation and treatment records, unless they are deleted earlier where legally appropriate.
- Financial and accounting records: retained for at least the period required under applicable UK tax and accounting legislation.
- Newsletter subscription details: retained until you unsubscribe or ask us to delete your information.
- Website analytics data: retained in accordance with the retention settings of the relevant analytics platform.
Subject to certain legal limitations, these rights may include the right to: request access to your personal information; request correction of inaccurate or incomplete information; request deletion of your personal information; request restriction of processing; object to certain types of processing; withdraw your consent where processing is based on consent; request a copy of information you have provided to us in a structured, commonly used format where applicable; complain to the Information Commissioner’s Office (ICO).
If you wish to exercise any of your rights, please contact us using the contact details provided below.
To protect your privacy, we may ask you to verify your identity before responding to your request.
We aim to respond to requests within the time limits required by applicable data protection legislation.
Children’s Privacy
Our website and our services are intended for adults aged 18 years or over.
We do not knowingly provide permanent makeup treatments to children or collect personal information from individuals under the age of 18 for treatment purposes.
If we become aware that personal information relating to a child has been collected unintentionally, we will take reasonable steps to delete that information.
Third-Party Websites
Our website may contain links to third-party websites.
These websites operate independently from WM Permanent Makeup and have their own privacy policies.
We encourage you to read the privacy policy of every website you visit before providing personal information.
We are not responsible for the content, privacy practices or security of third-party websites.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services; applicable laws or regulations; technology; business practices; guidance issued by the Information Commissioner’s Office (ICO).
The latest version will always be available on our website.
The “Last Updated” date at the beginning of this Privacy Policy shows when it was most recently revised.
Contact Us
If you have any questions about this Privacy Policy or about how we process your personal information, please contact us.
WM PERMANENT MAKEUP WIOLETTA MALOCHLEB
40 Moreton Street
Pimlico
London SW1V 2PB
United Kingdom
Email: wioletta@wmpermanent.uk
Telephone: +44 (0) 7476 691934
Website: https://wmpermanent.uk
Complaints
We hope to resolve any questions or concerns you may have about the way we handle your personal information.
If you have a concern, please contact us first and we will do our best to resolve the matter promptly and fairly.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority responsible for data protection.
Information about your rights and the complaints process is available on the ICO website.
Final Statement
Thank you for placing your trust in WM Permanent Makeup.
We are committed to protecting your personal information with the same professionalism, care and attention that we dedicate to every client and every treatment.
Your privacy matters to us, and we will continue to review and improve our data protection practices to ensure that your information remains safe, secure and handled with respect.