Consumer Health Data Privacy Policy
A+ iLash Studio · Seattle & Redmond
Effective date: November 7, 2026.
The Redmond studio is operated by Xingping Beauty LLC and the Seattle studio by Yunhui Beauty LLC, both doing business as A+ Ilash Studio. Each operator is responsible for the information handled for its studio. This separate notice addresses consumer health data we handle in connection with beauty services, including where Washington’s My Health My Data Act applies. It supplements our general Privacy Policy and is not a substitute for consent where consent is required.
Information, sources, and purposes
We may collect health information you provide in intake or consent forms or directly to the studio, and relevant observations made by your service technician. Categories include allergies and product sensitivities; eye or skin conditions, injuries, procedures and reactions; relevant medical conditions, medications and pregnancy or childbirth-related information disclosed in intake; and service notes or photos that reveal such information. These records may be associated with your contact details, signature, date, and studio.
We use this information to assess whether and how to provide the service you request, identify precautions, document informed consent, and address service-related reactions or concerns. We collect only information appropriate to these purposes. We obtain required consent before collecting or sharing it; sharing consent is separate from collection consent unless a lawful requested-service exception applies.
Access and disclosures
Relevant intake answers, reactions, service notes, or related images may be disclosed as necessary to the technician providing your service, including an independent contractor, and authorized personnel managing the service. Wix and our business email/storage providers may process submitted records and notifications on our behalf. We do not upload health consent forms or intake answers to Vagaro or provide them to other companies beyond these disclosed processing providers. Sharing relevant records with the technician serving you and necessary studio management is limited to the requested service and applicable authorization. We restrict access by role and purpose. We do not disclose health data to affiliates for their own use. Any additional recipient or purpose requiring consent will be disclosed before that use.
We do not sell consumer health data, use it for targeted advertising, or provide it to advertising platforms. Do not submit health intake information to an AI assistant. If health information is inadvertently included in a chat, the messaging provider may process it as part of the message; please contact us about removal and the appropriate intake channel.
Your rights and how to exercise them
Where applicable, you may confirm whether we collect, share, or sell health data about you; access the data and information about recipients; withdraw consent for future collection or sharing; and request deletion. Submit requests to info@aplusilashstudio.com with the subject “Consumer Health Data Request.” Include your name, studio, and how we can reach you, without including your medical history. We will arrange reasonable identity verification and respond within applicable legal time limits.
We will process deletion requests, including notifying relevant processors and recipients, as required by law. Applicable backup-deletion timeframes may differ. If we decline a request, we will explain the decision and how to appeal by replying to the same email with “Privacy Appeal.” You may also contact the Washington State Attorney General. We do not unlawfully discriminate against you for exercising privacy rights. If necessary information is unavailable, we will explain any resulting limits on safely providing the service.
We retain health information only for its appropriate disclosed purpose and applicable obligations, subject to applicable deletion rights, and use safeguards and access restrictions appropriate to its sensitivity. Contact either studio using the addresses and phone numbers in our general Privacy Policy.