Skip to main content

Legal

Privacy Policy

Last updated: October 11, 2026

Brows by Aylin ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, book services, contact us, or interact with our SMS or email notifications.

Information we collect

  • Contact and booking details: Name, phone number, email address, appointment preferences, service selections, and messages you send through our forms.
  • Usage data: Basic technical information such as browser type, device type, and pages visited, as commonly collected by web applications.
  • SMS: If you opt in to text messages, we process your mobile number and message content as needed to send confirmations, reminders, and related notices.
  • Email: If you provide your email address when booking, we process it to send a transactional appointment confirmation from noreply@browsbyaylin.com.
  • Deposit for your appointment: When you book online we take a deposit for your appointment through Stripe, our payment processor. Your payment details are sent directly to Stripe from your browser, and we never see or store them. We record the exact deposit policy wording shown to you and its version, the date and time you accepted it, the IP address the request came from, and your browser's user agent string, because a charge can be disputed later and this is the evidence that you were shown the policy and agreed to it.
  • Payment card, for appointments booked before we moved to deposits: Booking online used to save a payment card with Stripe rather than take a deposit, so that the $25 late-cancellation and no-show fee described in our Terms and Conditions could be charged if it applied. That still applies to appointments booked while it was in force. We never see or store your card number, security code or expiry date. What reaches us is the card brand and its last four digits, so that we can tell you which card a charge was made against.
  • Record of your agreement to the cancellation policy: Where that policy applied, we recorded the exact wording shown to you and its version, the date and time you accepted it, the IP address the request came from, and your browser's user agent string, for the same reason and in the same way as the deposit policy above.

How we use information

We use your information to:

  • Schedule, confirm, and manage appointments
  • Send transactional SMS related to your bookings (where you have provided consent and as permitted by law)
  • Send transactional confirmation emails when you provide your email address at booking
  • Respond to inquiries submitted through our website
  • Improve our website and customer experience
  • Comply with legal obligations

Sharing of information

We do not sell your personal information. We may share information with service providers who help us operate our business—for example, scheduling, calendar, database, hosting, analytics, SMS delivery (Twilio), email delivery (Resend), or card payments (Stripe)—only as needed for those services and subject to appropriate safeguards. Mobile numbers collected for SMS consent and opt-in data will not be shared with third parties or affiliates for marketing or promotional purposes under any circumstances.

Deposits for online bookings

Booking online takes a deposit for your appointment, described in full in our Terms and Conditions. It replaced the card arrangement described in the section below, which still applies to appointments booked under it; which one applies to your booking is decided by your own appointment record, not by when you are reading this page. Stripe is our payment processor for the deposit: your payment details are sent directly to Stripe from your browser and are stored by Stripe, not by us. A deposit may be paid by card, Apple Pay, Google Pay or Link, and we do not receive or store the underlying payment details for any of them.

The deposit ($10, $15 or $25 depending on the service) is credited against your bill when you come in. It is not returned if you cancel your appointment, do not come to it, or arrive more than 15 minutes after your start time. If you have missed an appointment before, we take the full price instead of a deposit, and record the same agreement. We record the exact deposit policy wording shown to you and its version, the date and time you accepted it, the IP address the request came from, and your browser's user agent string, so that a charged deposit can be defended if it is disputed.

The card held for appointments booked before we moved to deposits

Booking online used to save a card instead of taking a deposit. Where that is what happened, the card is held by Stripe, which acts as our payment processor: your card details went directly to Stripe from your browser and are stored by Stripe, not by us. Your name, phone number and email address are shared with Stripe so that the stored card can be identified with your appointment. Stripe processes that information as described in its own privacy policy.

The stored card is used only for the $25 late-cancellation and no-show fee set out in our Terms and Conditions. It is not offered or used to pay for your service, and we remove it from Stripe once your appointment is finished or cancelled and any fee under this policy is settled.

Payments made in person at the studio are taken on a Stripe card reader. Those are separate from the card described above and are not stored for later use.

SMS and email communications

SMS: Transactional text messages about your appointments are sent based on your booking and applicable consent. If we send promotional texts, we will obtain express consent and honor opt-outs. You may opt out by replying STOP to any message.

Email: When you provide your email address at booking, we send a transactional appointment confirmation from noreply@browsbyaylin.com via Resend. We do not use your email address for marketing without your explicit consent.

For full program terms and SMS disclosures, see our Terms and Conditions.

Cookies and similar technologies

Our site may use cookies or similar technologies as needed for basic functionality and analytics. You can control cookies through your browser settings.

On our public pages we use Google Analytics and the Meta Pixel (from Meta Platforms, the company behind Facebook and Instagram) to understand how people find us and to measure how our advertising performs. They set cookies and receive the pages you visit, basic details about your device and browser, and whether you started or completed a booking or an Academy enrollment, with the service or class, its price and the time chosen. We do not send either of them your name, email address, phone number or anything from your consent form, and neither one receives the private links to your appointment or enrollment. You can choose how Meta uses this information for advertising in your Meta ad preferences, and you can stop Google Analytics with Google's opt-out browser add-on.

Data retention

We retain information for as long as necessary to provide services, meet legal requirements, and resolve disputes. Retention periods may vary by data type and context.

The record of your agreement to the deposit policy, meaning the wording, its version, the timestamp, the IP address and the user agent, is kept with your appointment record for as long as a payment dispute over that deposit could still be raised, and is used for no other purpose. Stripe keeps its own transaction records under its own retention terms.

The same is true of the record of your agreement to the cancellation policy, for an appointment booked while a card was saved instead: the wording, its version, the timestamp, the IP address and the user agent are kept with your appointment record for as long as a payment dispute over that appointment could still be raised, and used for no other purpose. The card itself is removed from Stripe when your appointment is finished or cancelled and any fee under this policy is settled.

Security

We use reasonable administrative, technical, and organizational measures to protect your information. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.

Your choices

Depending on where you live, you may have rights to access, correct, or delete certain personal information, or to opt out of certain processing. To exercise these rights, contact us using the information below. For SMS, you may also reply STOP as described in our Terms.

Children

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date above.

Contact us

For privacy-related questions, contact us through the Contact page on our website or call (334) 728-4742.

← Back to home