Legal
Privacy Policy
How Miba Brows & Beauty collects, uses and protects your personal information — written to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
Last updated 10 August 2026
Who we are
Miba Brows & Beauty is a permanent makeup studio operating in Calgary, AB, Canada. For any question about this policy or about your information, contact us at mibabrows@gmail.com.
What we collect, and why
We only collect what we need in order to reply to you and to deliver the service you asked for.
- Consultation requests: your name, email, phone number if you give one, the service you are interested in, and anything you write in the message field. We use this solely to respond to your enquiry and arrange your consultation.
- Contact messages: your name, email, optional phone number and your message, used only to reply.
- Training waitlist: your name, email, optional phone number and your stated interest, used only to tell you when training dates open.
- Newsletter: your email address, together with a record of when you gave consent. Canada’s anti-spam legislation requires us to be able to demonstrate that consent, which is why the timestamp is stored alongside it.
We do not collect health or medical information through this website. Any medical history relevant to your treatment is discussed and recorded separately, in the studio.
Consent
Submitting a form is your consent for us to use those details for the purpose that form describes. Newsletter consent is separate, express and opt-in — an unticked box that you choose to tick. You may withdraw consent at any time by emailing us, and we will act on it promptly.
Where your information is stored
Form submissions are stored in a Supabase (PostgreSQL) database. This website is hosted by Vercel. Notification emails are delivered through Resend. These providers may process or store data outside Canada, including in the United States, which means it may be subject to the laws of those jurisdictions. We select providers that offer industry-standard security and contractual data protection.
Access to submissions is restricted by database-level security policies: the public website can submit a form but cannot read any submission, including its own. Only an authenticated studio administrator can read them.
How long we keep it
Consultation requests, contact messages and waitlist entries are kept for up to three years from your last contact with us, then deleted. Newsletter subscriptions are kept until you unsubscribe. You can ask us to delete your information sooner at any time.
Cookies and analytics
We use Vercel Analytics to understand which pages are visited and how quickly the site loads. It is cookieless and does not collect personal information or track you across other websites.
If we run advertising, we may load the Meta (Facebook and Instagram) Pixel, which does set cookies and does report activity back to Meta. It is loaded only after you accept it in the cookie banner, and declining leaves the rest of the site fully functional.
What we never do
We do not sell your personal information. We do not rent, trade or share it with third parties for their own marketing. We do not send marketing email to anyone who has not expressly opted in.
Your rights
Under PIPEDA and Alberta’s PIPA you may ask us what personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it, and withdraw consent for future contact. Email mibabrows@gmail.com and we will respond within 30 days.
If you are not satisfied with how we handle your request, you may contact the Office of the Information and Privacy Commissioner of Alberta, or the Office of the Privacy Commissioner of Canada.
Children
Our services are not offered to anyone under 18, and this website is not directed at children. We do not knowingly collect information from minors.
Changes to this policy
If we change how we handle personal information we will update this page and revise the date at the top. Material changes will be announced on the website.
Please note. This policy is written in plain language for clarity. It is not legal advice, and it has not been reviewed by a lawyer. Have it reviewed before relying on it.