Privacy Policy

A+ iLash Studio · Seattle & Redmond
Effective date: November 7, 2026.

Our Redmond studio is operated by Xingping Beauty LLC, and our Seattle studio is operated by Yunhui Beauty LLC. Both use the A+ Ilash Studio business name. Each operator is responsible for the customer information it handles for its studio. We use “A+ iLash Studio,” “we,” and “our” in this notice to refer to the relevant studio operator. This policy explains how A+ iLash Studio handles personal information through our website, studio services, online forms, booking links, and customer communications. Our separate Consumer Health Data Privacy Policy explains how we handle health-related intake information. This notice describes our practices; it does not replace a consent required for a particular use of your information.

1. Information we collect

• Contact and appointment information: your name, email address, telephone number, selected studio, services, appointment details, preferences, and customer-service requests.

• Messages: the messages and attachments you send, our replies, timestamps, and delivery or interaction information made available by the messaging service.

• Forms and service records: information you submit through inquiry and consent forms, signatures, service acknowledgments, and relevant service history. Health-related information is addressed separately below.

• Photos: photos you choose to send or allow us to take. Permission to use photos in public marketing is separate from permission to document a service.

• Website and advertising interactions: IP address, browser/device information, pages viewed, referral sources, cookie or similar identifiers, and interactions with our website and ads.

We obtain information from you, from staff documenting your service, and from the booking, website, messaging, and measurement providers you interact with. Use the booking provider’s payment flow for payments; do not send card numbers through chat or inquiry forms.

2. How we use information

We use information to respond to inquiries, arrange and manage requested services, communicate about appointments, maintain consent and service records, address concerns, protect against abuse, meet applicable obligations, and understand website and advertising performance. Where required, we obtain consent for optional uses. Starting a support conversation does not enroll you in promotional text messages.

3. Google AI-enabled messaging and website chat

When available, Google AI-enabled messaging can answer routine questions using our Business Profile and website information. Website chat may also use AI. Conversations may be processed and stored by the relevant provider and reviewed by authorized studio personnel to respond to you and assess response quality. Google, messaging partners, mobile carriers, and the messaging app may process information needed to provide, deliver, secure, and support the service. For Google RCS, this can include your phone number, conversation content, attachments, and message metadata. Google business RCS conversations are not end-to-end encrypted.

AI responses are informational and can be inaccurate. An AI response alone is not confirmation that an appointment has been booked, changed, or cancelled. Use the booking links on our website to complete a new booking. For changes or cancellations, contact the correct studio and obtain confirmation from our team or the authorized booking system. AI cannot provide medical advice or guarantee service suitability or availability.

Please do not send medical histories, allergy details, health consent forms, passwords, government identification numbers, or payment details in AI chat. Contact your studio for the appropriate intake process. If you accidentally send sensitive information, ask us how to request its removal; provider-held copies may require a separate request.

To request a person, ask in the conversation or call your studio. Human replies are not guaranteed to be immediate. For Google RCS messages, you can reply STOP or UNSUBSCRIBE to opt out, or use the messaging app’s blocking controls. A new message you initiate may reopen the conversation. Availability depends on your device and carrier; ordinary messaging or data charges may apply.

4. Providers and disclosures

Information may be processed by authorized studio staff and the technician serving you, including an independent contractor; Wix for website hosting, forms, website chat, and related tools; Vagaro for appointments and related transactions; Google for Business Profile messaging, advertising, and measurement; and providers supporting business email, messaging delivery, storage, and security. We limit access and disclosure to the purpose of the service and any required authorization. Providers may also process information under their own privacy notices when you use their services directly.

We may disclose information when legally required, to protect rights and safety, or to professional advisers as appropriate. We do not sell AI conversation content, health intake responses, or SMS opt-in information, or provide these to others for their own marketing. We do not use health intake responses or AI conversation content for advertising targeting. Public use of identifiable client photos requires the relevant separate permission.

5. Cookies, advertising, and measurement

Our site uses Wix and Google technologies to operate the website, understand visits, and measure advertising and actions such as booking-page visits and calls. These technologies may use cookies and other identifiers and may allow providers to connect interactions across sites or services. Some advertising-related disclosures can be treated as a “sale,” “sharing,” or targeted advertising under applicable privacy laws even without a monetary payment.

Where consent is required, optional tracking must remain subject to that consent. You can manage cookies in your browser and use any privacy controls provided on our site. You can manage Google ad personalization at Google My Ad Center and learn about Google’s use of partner-site data at Google’s partner-site privacy information. Disabling cookies may affect some features. This notice does not authorize sending health-form answers or chat contents to advertising platforms.

6. Retention and security

We retain information for the time reasonably needed for the purpose for which it was collected, applicable recordkeeping obligations, and the resolution of service or legal matters, subject to your applicable deletion rights. Different records and providers may have different retention periods. We use reasonable safeguards appropriate to the information and restrict access according to business need. No online service can guarantee absolute security. Providers may process information in the United States or other countries where they operate.

7. Your choices and requests

Contact us to request access to, correction of, or deletion of your personal information, withdraw an optional consent, or ask about advertising-related privacy choices. Rights and exceptions depend on applicable law. We may verify your identity using information reasonably necessary for the request. We will explain any applicable limitation. For provider-controlled accounts or records, you may also need to contact that provider. Health-data requests are covered by the separate policy below.

Our website and AI chat are not directed to children under 13. A parent or guardian should contact us directly about any service for a minor. Contact us if you believe a child has submitted information without appropriate authorization.

8. Contact and updates

Email info@aplusilashstudio.com with the subject “Privacy Request,” and identify the relevant studio. Please do not include sensitive medical details in the initial email.

Seattle: 9425 35th Ave NE, Unit C, Seattle, WA 98115 · (206) 886-9479
Redmond: 8135 161st Ave NE, Redmond, WA 98052 · (425) 979-9541

We will post updates here with a revised effective date and provide additional notice or obtain consent when required. A policy update does not by itself authorize a new use of health data or another use requiring consent.