Privacy Notice

1. Who is responsible for your data?

Pretty Eyebrows® (trade name), with two locations in Tijuana, Baja California, Mexico:

• Ermita Sur: Av. Ermita Sur 5171, Leos Montoya, 22106 Tijuana, B.C.
• Cacho: Calle España 9230, Madero (La Cacho), 22040 Tijuana, B.C.

Privacy contact email: admin@prettyeyebrows.com.mx.

2. What personal data do we collect?

• Identification and contact details: name, phone number and email, when you book via WhatsApp, the client app, or in person.
• Appointment and service history: which treatments you've had, dates, location and stylist, and your preferences.
• Payment data: when you pay by card or transfer, our payment processor handles your card details directly — we do not store the full card number.
• Face and brow photos (before/after), taken to show you the result or, with your authorization, for our public gallery. This is sensitive personal data — see the notice above.
• Browsing data on this site and interaction with our advertising: pages visited, clicks on WhatsApp buttons, IP address and device data, collected through the Meta (Facebook/Instagram) pixel.
• Hashed contact data (encrypted so Meta cannot read it directly) that we send to Meta to measure whether an ad led to a booked appointment and to build advertising audiences (see secondary purposes).

3. What we use your data for (primary purposes)

• Booking, confirming, reminding you of, and rescheduling appointments.
• Providing the service you chose and following up — for example, aftercare instructions.
• Billing and tax compliance.
• Contacting you by WhatsApp, phone or email about your appointment.
• Managing your client-app account, if you use one.

These purposes are necessary to serve you — you cannot opt out of them without us being unable to book or serve you.

4. Secondary purposes (optional — you can opt out)

• Sending you promotions, reminders that you're due for your next appointment, or salon news.
• Measuring and improving our advertising on social media: showing you relevant ads, measuring whether they led to a booking, and using your encrypted contact data to build advertising audiences on Meta — for example, to show you our promotions or to find people with interests similar to our clients'. Meta cannot read your encrypted data: it only matches it against its own users.
• Internal analytics to understand which services are most popular or improve the site experience.

If you don't want us to use your data for these purposes, write to admin@prettyeyebrows.com.mx and we will stop, without affecting any service you've already booked. This includes removing you from advertising audiences.

5. Who we share your data with

• Meta Platforms, Inc. (Facebook/Instagram): receives browsing data via the pixel and encrypted (hashed) contact data, to measure ad campaigns and to build advertising audiences. Meta matches it against its own users and discards what doesn't match.
• Technology providers that run our booking system, site hosting, WhatsApp Business as a messaging channel, and our card payment processor.

We do not sell your personal data to anyone. We do not share your treatment history with third parties unrelated to providing the service. These providers act as processors under contract, bound to protect your data the same way we do.

6. Your data rights (Mexico — LFPDPPP)

Under Mexican law you have the right to Access your data, Rectify it if it's wrong, request we Cancel it (where the law allows), and Object to a specific use.

To exercise these, email admin@prettyeyebrows.com.mx with your name, which right you want to exercise, and a copy of an ID. We respond within a maximum of 20 business days, per Mexican law. You can also revoke any consent you've given us at any time.

7. Cookies and the Meta pixel

This site uses the Meta pixel to measure which visits lead to a WhatsApp click. It loads deferred, and only in production — never on our staging site. You can block third-party cookies from your browser settings, or use a tracking-blocking extension.

8. If you're visiting from California, USA

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to know what data we hold about you, request deletion, correct it, and opt out of us "sharing" your data for targeted advertising — which may include the hashed data sent to Meta and its use to build advertising audiences.

To exercise these rights, email admin@prettyeyebrows.com.mx noting that you're writing from California and which right you'd like to exercise. We will not discriminate against you for exercising them.

9. Minors

Our services are aimed at adults. If a minor receives a service, they must be accompanied by a parent or guardian, who provides consent.

10. Changes to this notice

We may update this notice. The last-updated date appears below, and material changes will be posted visibly on the site.

Last updated: September 25, 2026 · Version: draft 1.0