Privacy Policy

Studio 11 is a permanent makeup studio operated by Aleksandra Zając, a sole trader based at 27 Sheet Street, Windsor SL4 1BN, United Kingdom. For the purposes of UK data protection law, Aleksandra Zając is the data controller for the personal data described in this policy.

Contact for any privacy matter, including requests to exercise your rights: contact@11studio.co.uk.

• Enquiry data — name, email address, telephone number, the treatment you are interested in and the content of your message, submitted through the contact form on this website.
• Messages you send us — content of emails, phone calls, SMS and Instagram direct messages.
• Consultation and treatment records — health questionnaire answers, contraindications discussed, pigment and technique used, aftercare given and signed consent forms. Health information is special category data.
• Before and after photographs — taken as part of the treatment record, with your consent.
• Website and assistant data — the questions you type into the AI assistant on this site, plus technical data such as IP address, browser type and pages visited, which is processed for security, abuse prevention and to keep the site working.

We do not knowingly collect data from anyone under 18. Permanent makeup treatments are provided to adults only.

• Answering enquiries and arranging appointments — legitimate interests, or steps towards entering a contract with you.
• Providing the treatment you booked — performance of a contract.
• Treatment and consent records, including health information — your explicit consent, given on the consent form, together with our legitimate interest and legal obligation to keep accurate records for insurance, licensing and safety purposes.
• Publishing photographs on social media — only where you have given separate, specific consent, which you can withdraw at any time.
• Keeping the website and AI assistant secure — legitimate interests in preventing abuse and misuse.
• Complying with tax, accounting and insurance obligations — legal obligation.

We do not send newsletters or marketing text messages, and we do not sell or rent your data to anyone.

We use a small number of service providers who process data on our behalf, under written terms and only on our instructions:

• Website and database hosting, including storage of contact form submissions.
• Transactional email delivery, used to send us your enquiry.
• The AI provider that powers the assistant on this site, which processes the text of your questions in order to generate a reply.
• Google Search Console, which gives us aggregated, non-identifying statistics about how the site appears in search results.
• Our accountant, insurer or professional advisers, where necessary.

Some providers may process data outside the UK. Where that happens, transfers are protected by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

If you contact us through Instagram, Meta processes that conversation under its own privacy policy and we have no control over it.

• Client records, consent forms and before and after photographs — 7 years from your last treatment, for insurance and record keeping purposes.
• Enquiries that do not lead to a booking — up to 24 months, then deleted.
• Financial records — 6 years, as required by HMRC.
• AI assistant conversations and technical logs — kept only for a short period for security and troubleshooting.

Under UK data protection law you have the right to:

• be informed about how your data is used
• access a copy of the data we hold about you
• have inaccurate data corrected
• have your data erased, where no legal obligation requires us to keep it
• restrict or object to certain processing
• receive your data in a portable format
• withdraw consent at any time, including consent to use your photographs

To exercise any right, email contact@11studio.co.uk. We will respond within one month. Withdrawing consent does not affect processing that already took place.

If you are not satisfied with our response you can complain to the Information Commissioner's Office, ico.org.uk, helpline 0303 123 1113.

Digital records are held in access controlled, encrypted systems. Paper consent forms are stored securely at the studio. Only Aleksandra Zając has routine access to client records. If a breach occurs that is likely to risk your rights and freedoms, we will notify the ICO within 72 hours and inform you where required.

This website uses only essential cookies and local storage needed to make the site work. Details, and how to manage your choices, are set out in our Cookie Policy.

We may update this policy to reflect changes in our practices or the law. The current version is always published on this page with its last updated date.