Effective 1 May 2026

Privacy Policy

This page describes how Peaklyft Beauty Atelier Sdn Bhd ("Peaklyft", "we") collects, uses, stores and protects the personal information you share with us when you book a service, walk into the studio, or interact with this website. We aim to do the simple, ethical thing in every case — this page documents the specifics.

The data we collect

Booking forms. Name, email address, mobile number, preferred service, preferred date, optional brief. Used to confirm and schedule your appointment, and to send follow-up care messages.

In-studio records. Lash map drawing, adhesive batch used, before/after photos (only with your written agreement at the chair), allergy notes, contact lens type if disclosed. Used to keep refills consistent and safe.

Payment. We use a third-party payment processor (FPX, Visa, Mastercard). Card numbers are never stored on our systems; only a transaction reference is retained.

Cookies. See the cookie policy for the full list.

How long we keep it

• Booking requests that did not become appointments — 90 days, then deleted.
• Active guest records — for as long as you visit us, plus 24 months of inactivity.
• Before/after photos — until you ask us to delete them, no automatic schedule.
• Payment records — seven years, as required by Malaysian tax law.

Who we share it with

We do not sell or rent your data. We share information only with:

• Our payment processor, for the limited purpose of completing a transaction.
• Our hosting provider, for storage and security.
• Government authorities, only when compelled by valid legal request.

Your rights under the PDPA 2010

Under the Personal Data Protection Act 2010, you may:

• Ask for a copy of the personal data we hold about you.
• Correct any information that is wrong or out of date.
• Withdraw consent to specific uses (e.g. photo retention or marketing emails).
• Ask for your data to be deleted, subject to legal retention requirements above.

To exercise any of these rights, email [email protected] with the subject line "PDPA request". We respond within 21 working days.

Security

Our website runs over HTTPS only, with a current SSL certificate. Our scheduling system is access-controlled to named team members and audited monthly. Physical records (lash map cards, allergy notes) are kept in a locked cabinet on premises and shredded on disposal.

Changes to this policy

Material changes will be reflected on this page with a revised effective date. Minor edits (typos, link corrections) are not announced.

Contact

Peaklyft Beauty Atelier Sdn Bhd (Reg. 1647582-K)
Level 4 Pavilion Elite, 168 Jalan Bukit Bintang, Bukit Bintang, 55100 Kuala Lumpur
Email: [email protected]