Privacy Policy

Vella Beauty Studio Sdn. Bhd. (“Vella”, “we”, “us”) operates the website learnsmith.my and the lash and brow studio at 23-1, Jalan Telawi 3, Bangsar Baru, 59100 Kuala Lumpur. We handle personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA). This page explains what we collect, why, and the choices you have.

1. Data we collect

We only ever collect data you actively give us or that your browser sends in the ordinary course of visiting a website:

• Enquiry details — your name, email address, phone number (if provided), the treatment you are interested in and the content of your message, submitted through our booking form.
• Appointment records — treatment history, lash maps, adhesive and product notes, and any sensitivities or allergies you disclose so we can treat you safely on repeat visits.
• Technical data — IP address, browser type and pages viewed, recorded in standard server logs kept by our hosting provider.
• Cookie preferences — a single cookie remembering whether you accepted or declined non-essential cookies (see our Cookie Policy).

2. Why we process it

We use your data to respond to enquiries, schedule and manage appointments, keep treatment records that protect your eye health, meet our legal and tax obligations, and — only if you have expressly agreed — send occasional studio updates. We do not profile you, and we make no automated decisions about you.

3. What we never do

We do not sell, rent or trade your personal data to anyone. We do not share it with advertisers. Access within the studio is limited to the artists and front-desk staff who need it to look after you.

4. Third parties we rely on

A small number of service providers process data on our behalf: our website hosting company (server logs), our appointment diary software, and Google Fonts, which serves the typefaces on this site and may log the IP request that fetches them. Each provider is bound by its own data protection commitments.

5. How long we keep things

Enquiry emails are deleted after twelve months if no appointment results. Client treatment records are retained for as long as you remain a guest and for two years after your last visit, after which they are destroyed. Accounting records are kept for seven years as required by Malaysian law.

6. Security

Records are stored on access-controlled systems; paper consultation cards are kept in a locked cabinet at the studio. The website is served over HTTPS. No method of storage is perfectly secure, but we limit both what we collect and who can see it.

7. Your rights under the PDPA

You may request access to the personal data we hold about you, ask us to correct it, withdraw consent to marketing at any time, or ask us to delete data we are not legally required to keep. Write to [email protected] and we will respond within twenty-one days.

8. Children

Our services and website are directed at adults. We do not knowingly collect data from anyone under eighteen; lash and brow treatments for guests under eighteen require a parent or guardian present.

9. Changes to this policy

If we change how we handle personal data we will update this page and revise the date at the top. Significant changes will be flagged on the booking form.

10. Contact

Data questions can be directed to Vella Beauty Studio Sdn. Bhd., 23-1, Jalan Telawi 3, Bangsar Baru, 59100 Kuala Lumpur, Malaysia, or [email protected], or +60 3-2201 4855.