Privacy Policy

This policy explains how Fernsmith Beauty Sdn Bhd ("Fernsmith", "we", "us"), operator of the website fernsmith.my and the Fernsmith Lash & Brow Studio in Mont Kiara, Kuala Lumpur, handles personal data. We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Data we collect

We keep collection deliberately minimal:

• Enquiry details — when you submit our booking form we receive your name, email address, optional phone number, chosen treatment and the note you write.
• Appointment records — if you become a guest, we record treatment history, lash mapping preferences, patch-test outcomes and any sensitivities you disclose, so your next appointment builds on the last.
• Technical basics — our hosting provider logs IP addresses and requested pages for security and error diagnosis. We do not build behavioural profiles from these logs.

2. Why we process it

• To answer your enquiry and schedule, confirm or amend appointments.
• To perform treatments safely — allergy and sensitivity notes exist to protect your eyes.
• To meet legal obligations, including tax and accounting record-keeping.
• With your separate, explicit consent only: to send occasional studio updates. We do not add enquirers to any mailing list by default.

3. What we never do

We do not sell, rent or trade personal data. We do not share guest photographs without written permission obtained for each image. We do not use automated decision-making or profiling.

4. Disclosure

Data is disclosed only to service providers strictly necessary to run the studio — our booking calendar software, payment processor and accountant — each bound by confidentiality, or where disclosure is required by Malaysian law or a competent authority.

5. Retention

Enquiries that do not become bookings are deleted within 12 months. Guest treatment records are kept for as long as you remain an active guest and for 24 months afterwards, unless a longer period is required by law. You may request earlier deletion at any time (see Section 7).

6. Security

Records are stored on access-controlled systems available only to studio staff who need them. Paper consultation cards, where used, are kept in a locked cabinet at the studio and digitised or destroyed within 30 days.

7. Your rights under the PDPA

You may request access to the personal data we hold about you, ask for corrections, withdraw consent to further processing, or ask us to delete your records. Write to [email protected] with the subject line "Data request" and we will respond within 21 days.

8. Cookies

This website uses a small number of cookies and similar technologies, described separately in our Cookie Policy.

9. Contact

Fernsmith Beauty Sdn Bhd (Company Reg. No. 202301052148 (1533672-M))
Lot 2-16, Level 2, 163 Retail Park, 8 Jalan Kiara, Mont Kiara, 50480 Kuala Lumpur, Malaysia
Phone: +60 3-6211 4837 · Email: [email protected]

10. Changes to this policy

If we change how we handle personal data, the revised policy appears on this page with a new revision date. Material changes affecting existing guests are additionally announced at the studio reception.