Privacy Policy


​This privacy policy sets out how Nail & Brow Studio uses and protects any information that you give Nail & Brow Studio when you use this website.


Nail & Brow Studio is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

Your data is incredibly important to you and to us. Nail & Brow Studio uses and stores your data to manage your appointment, and/or for marketing with your consent. You may withdraw consent for marketing at any time.


We are Pegasus Limited, trading as Nail & Brow Studio, a beauty studio, based in Kilburn London.


  • Our Site is owned and operated by Us.

  • We are currently not VAT registered.

  • Nail & Brow Studio is a trading name of Pegasus Aesthetics Limited.

  • Our Company Registration number is 14004117.

  • Our Data Protection Officer is Tye West, who can be contacted by email at, or by post at 78 Willesden Lane, London, NW6 7TA, UK.


We are committed to ensuring that your privacy is protected and understand the need for protection of all personal information provided by you to us. This privacy notice is to state what personal information we collect about you, why we collect it and what we do with it. If you have any questions or concerns about our privacy notice, please do get in touch with us by email at


We collect and use many kinds of personal information to provide our products and services to you. The personal information we may collect about you is listed below:


  • Contact Details: Your name, phone number and where you live;

  • Age: Your date of birth and/or age;

  • Demographic data: Your gender and nationality;

  • Communications: What we learn about you from communications and conversations between us including reservations and information necessary to fulfil your special requests;

  • Usage: Data about how you use our products and services;

  • Technical: Details on the devices and technology you use;

  • Financial: Your credit card details and billing address;

  • Client card: Details about any products or services that we may provide for you; and

  • CCTV: Information provided through CCTV recordings at our studio.


If you provide the personal information of anyone other than yourself (e.g. your family members or friends), you are responsible for the informing of that person that we are collecting their personal information and for ensuring that you have valid permission to provide such personal information to us.


If you are a minor under 16 years of age, please obtain consent from your parent or guardian before you submit any personal information to us. If you are a parent or guardian of a minor and you have reason to believe your child or ward has provided us with their personal information without your prior consent, please contact us to request for erasure of their personal data or for the minor to be unsubscribed from our mailing lists.


We collect and process your information in the following ways:


  • Information you give us;

  • When you make a reservation at Nail & Brow Studio;

  • When you purchase gift cards/vouchers and certificates;

  • When you visit, or make transactions via our website;

  • When you respond to our promotions, or subscribe to our mailing lists;

  • When you participate in competitions, organised by us;

  • When you attend events organised by us, or conducted at our studio;

  • When you use our services (or express an interest in doing so) including services and product purchases;

  • When you communicate with us by telephone, email, via our website or through other communication channels, such as social media;

  • When you visit our websites, or register a user account with our websites or mobile applications;

  • When we seek information about you and receive your personal data about your relationship with us; and

  • When you submit your personal data to us for any other reason.


Information we collect automatically when you use our services are:  

  • Payment and transaction data;

  • Profile and usage data. This includes:

  • The security details you create and use to connect to our services;

  • Your settings and marketing choices;

  • Data we gather from devices you use to connect to our online services; and

  • Data we gather from cookies we use and other internet tracking software whilst you are using our website or mobile device applications.

Information we receive from third parties:

  • Our business partners such booking agencies, reservation systems and third parties providing advertising, marketing and promotional services to us;

  • Social networks;

  • Event organisers; and

  • Family members or friends who provide your personal information to us on your behalf.


When your images are captured by us via CCTV cameras while you are within the studio, or when photographs or videos of you are taken when you attend events or functions hosted by us.


We collect your personal information for several purposes. Where we collect your personal information, we will have one or more of the following reasons:


  • To provide a requested service or retail our products;

  • Where we have a legal obligation;

  • Where we have a legitimate interest; and

  • Where we have your consent.

Here are the legal grounds for collecting your personal information that are relevant to us:


  • To provide a requested service or carry out a contract with you;

  • To manage our relationship and communicate with you;

  • To process your payments, if you purchase our products such as gift vouchers, to provide you with order updates and deal with your enquiries;

  • To authenticate the identity of individuals contacting us by telephone, electronic means or otherwise;

  • To administer and manage your account and associated services including updating your records and answering your queries;

  • To manage how we work with other companies that provide services to us and our customers; and

  • Sharing your personal data with certain third-party service suppliers such as payment service providers.

Where we have a legal obligation:


  • To comply with laws and regulations that apply to us;

  • To establish, defend and enforce our legal rights; and

  • To deal with requests from you to exercise your rights under data protection laws.


Where we have a legitimate interest:

  • To manage our relationship with you;

  • For internal training and quality assurance purposes; To administer and manage your account and associated services including updating your records;

  • To manage and audit our business operations including accounting;

  • To run our business in an efficient and proper way. This includes managing our financial position, business capability, IT and governance requirements;

  • To develop and carry out marketing activities and to conduct market research and analysis and develop statistics;

  • To study how our customers, use products and services from us and other organisations;

  • For security and safety purposes, about the boutique that we own and manage, or events organised by us or conducted at our boutique;

  • For compliance with internal policies and procedures, including audit, accounting, risk management and record keeping; and

  • For carrying out research and statistical analysis, including development of new products and services or evaluation and improvement of our existing products and services.

Where we have your consent:


  • To develop and carry out marketing activities such as informing you of our latest activities, activations and promotions;

  • To study how our customers, use products and services from us and other organisations; and

  • To communicate with you about our products and services.

We may also from time to time ask you for your consent for other purposes, which we will explain to you at the time.


We will keep your personal information for as long as you are a customer of ours. We may keep your data for up to 3 years after your last interaction with us or where you have made a transaction, your data will be removed 5 years after such transaction. The reasons we may do this are:


  • To respond to a question or complaint, or to show whether we gave you fair treatment;

  • To study customer data as part of our own internal research; and

  • To comply with rules that apply to us about keeping records.


We may also keep your data for longer if we cannot delete it for legal or regulatory reasons. After this time, we will securely erase your information.


Your personal information is important to us and we will make sure your privacy is protected.


We may share your personal information with other parties to provide you with products and services, run our business and comply with rules that apply to us.


As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or merges with us your personal information will be disclosed to such entity. Also, if any bankruptcy or reorganisation proceeding is brought by or against us, all such information will be considered an asset of ours and as such it is possible, they will be transferred to third parties.


We may share your personal information with third parties who perform functions on our behalf and who also provide services to us, such as professional advisors, social media networks, data management companies, digital agencies, reservation booking platforms, gift voucher solutions providers, CRM software providers and IT consultants carrying out testing and development work on our business technology systems and function coordinators. These third parties will comply with similar and equally stringent undertakings of privacy and confidentiality. We may also share your personal information to our appointed representatives about a contracted transaction between you and us, including solicitors. These third parties comply with similar and equally stringent undertakings of privacy and confidentiality.


We may also share your personal information with the following organisations:

  • Agents and advisers who we use to help run our business, collect what you owe and explore new ways of doing business;

  • Companies that introduce you to us;

  • Companies that we introduce you to; and

  • Companies you ask us to share your data with.


Where required we may also share your personal information with third parties to comply with a legal obligation; when we believe in good faith that an applicable law requires it; at the request of governmental authorities conducting an investigation; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency; or otherwise to protect the rights, property, safety, or security of third parties, visitors to the our website, our business or the public.


The right to object to processing:

  • You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities).


The right to be informed:

  • You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. Therefore, we’re providing you with the information in this privacy notice.


The right of access:

  • You have the right to obtain access to your information (if we’re processing it), and certain other information (similar to that provided in this privacy notice). This is so you’re aware and can check that we’re using your information in accordance with data protection law.


The right to rectification:

  • You are entitled to have your information corrected if it’s inaccurate or incomplete.


The right to erasure:

  • This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.


The right to restrict processing:

  • You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.


The right to data portability:

  • You have rights to obtain and reuse your personal information for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.


The right to lodge a complaint:

  • You have the right to lodge a complaint about the way we handle or process your personal information with your national data protection regulator.


The right to withdraw consent:

  • If you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal information for marketing purposes.

We usually act on requests and can provide information for a reasonable fee to cover our administrative costs of providing the information for:


  • Baseless or excessive/repeated requests; or

  • Further copies of the same information.


Alternatively, we may be entitled to refuse to act on the request.


Please consider your request responsibly before submitting it. We’ll respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know.


If you have any questions about this privacy notice, or would like to exercise any of your rights, please contact us by writing to us at the email address:


If you are unhappy about any aspect of the way we collect, share or use your personal information, please let us know using the contact details above.

Privacy Notice for Recruitment

This notice applies to potential new employees, workers, directors and consultants. This notice does not form part of any contract of employment or other contract to provide services. If you are offered and accept an engagement with us you will be provided with a new privacy notice which will replace this one and cover you working for us.


We are committed to respecting your privacy. This notice is to explain how we may use personal information we collect before and during our recruitment process. This notice explains how we comply with the law on data protection and what your rights are.


For the purposes of this privacy notice and data protection laws we are the controller of your personal information which we are processing to recruit you.



When you interact with us in relation to your work with us, you may provide us with or we may obtain personal information about you, such as information regarding your:


  • contact details such as name, title, addresses, telephone numbers, and email addresses;

  • date of birth;

  • marital status and dependants;

  • referee details, next of kin, beneficiaries, details of family members and emergency contacts;

  • national insurance number and other tax or governmental identifiers;

  • bank accounts, payroll and tax status

  • salary, bonus, commission, remuneration, annual leave, pension and benefits;

  • start date and leaving date;

  • location of employment or workplace;

  • driving licence(s) (including copies where we are required to hold such information for identification or insurance purposes where you are to use our vehicles);

  • identification documents such as passport, utility bills, identity cards, etc;

  • recruitment (including copies of right to work documentation, past employment history, references and other information included in a CV or cover letter or as part of the application process);

  • work records (including job titles, work history, working hours, training records and professional memberships) and education and professional records/qualifications;

  • compensation history and charity donation preferences;

  • pension and pension entitlements; and

  • images in video and/or photographic form and voice recordings.


We will always aim to make it clear which personal information it is necessary for you to provide and which personal information is optional. However, if you are unsure as to whether you are required to provide any particular piece of personal information, please contact us.



We may also collect, store and use the following “special categories” of more sensitive personal information regarding you:


  • information about your race or ethnicity, religious beliefs, sexual orientation and political opinions;

  • information about your trade union memberships;

  • information about your health, including any medical condition, health and sickness records, medical records and health professional information and disability information; and

  • biometric information about you, for example fingerprints, retina scans.


We may not collect all of the above types of special category information about you. In relation to the special category personal data that we do process we do so on the basis that:


  • the processing is necessary for reasons of substantial public interest, on a lawful basis;

  • it is necessary for the establishment, exercise or defence of legal claims;

  • it is necessary for the purposes of carrying out the obligations and exercising our or your rights in the field of employment and social security and social protection law; or

  • based on your explicit consent.


For criminal records information in relation to you we process it on the basis of legal obligations or based on your explicit consent. We do not generally collect criminal records information about you.



We typically collect personal information about employees, workers, directors and consultants through the application and recruitment process, either directly from candidates or sometimes from an employment agency, online recruitment platforms or work-related online platforms such as LinkedIn.


We may sometimes collect additional information from third parties including former employers, organisations you have worked for, credit reference agencies or other background check agencies.


If you are providing us with details of referees, next of kin, beneficiaries, family members and emergency contacts they have a right to know and to be aware of how what personal information we hold about them, how we collect it and how we use and may share that information. Please share this privacy notice with those of them whom you feel are sufficiently mature to understand it.


In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you.


General information on Klarna you can find on Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s Privacy Policy.


We may need to make changes to this privacy notice at any time. If we make any material change to how we collect your personal information, or how we use or share it, we will update the privacy notice on our website, and we will inform you of these changes by our normal means of communicating with you, including by email, or by post.



Cookies are small data files that are placed on the browser on your computer or mobile device when you visit a website and use its functions, or use an app. Cookies are widely used by online service providers to facilitate and help to make the interaction with users faster and easier (by helping us to distinguish between you and other users and enabling us to retrieve things like your settings and preferences), as well as to provide reporting information and facilitate online advertising.

Cookies set by Nail & Brow Studio on this Website are called “first party cookies”. Cookies on the Website set by parties other than Nail & Brow Studio are called “third party cookies”. Third party cookies enable third party features or functionality to be provided on or through the website (e.g. interactive content and analytics).


We use the following types of cookies: is hosted on For detailed information on how cookies are used and the type of cookies used please visit


Required cookies are essential for you to browse our website and use its features. These cookies help us to know if you have already seen content that we don’t want to show you anymore and to keep some of your preferences for further visits (e.g. the cookies banner) without storing any personal information from you.


Preferences cookies, also known as functionality cookies, allow a website to remember choices you have made in the past or what content you have signed up to see so you don’t have to give us your details again.


Statistics cookies, also known as performance cookies, collect information about how you use a website, like which pages you visited and which links you clicked on. None of this information can be used to identify you. It is all aggregated and, therefore, anonymised. Their sole purpose is to improve website functions.


Please note that third parties may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

LAST UPDATED: 01/04/2022