Lash Assist Pro
Operated by 2387273 Ontario Inc.
Last Updated: July 7th 2026
Effective Date: July 22nd 2026
1. Overview
This Privacy Policy explains how 2387273 Ontario Inc. ("we," "us," "the Company"), operator of Lash Assist Pro ("LAP," "the Service"), collects, uses, discloses, and protects personal information.
This policy is intended to address the privacy laws applicable where our users are located, including Canada's PIPEDA and Quebec's Law 25, the EU GDPR and UK GDPR, and applicable US federal and state privacy laws, including state consumer health data laws. The Service is offered worldwide; where local law grants you additional rights, we will honor them as required.
2. Information We Collect
2.1 Information You Provide
Account information: name, email, business name, billing information (processed by our payment processor).
Business settings: your subscription plan, policies, waivers, and configured forms.
Client records you choose to enter: client names and contact details, session history, consultation form responses, allergy and sensitivity notes, photos, and product usage data.
Communications with our support team.
2.2 Information Collected Automatically
Usage data (features used, login activity, device/browser type).
Cookies and similar technologies, including Google Analytics and the Meta Pixel — see our Cookie Policy.
2.3 Sensitive Personal Information
Some client data you choose to store — particularly allergy and sensitivity notes and consultation form responses — may constitute sensitive personal information under PIPEDA, GDPR, and US state consumer health data laws. We do not require you to collect this information; it is collected only when you choose to enter it for your own client records. We do not sell it or share it with advertisers, and we use it only to display it back to you within the Service. You, as the artist/studio entering this data, are responsible for obtaining any consent from your own clients required under applicable law.
2.4 Our Roles: Controller and Processor
For your account, billing, and usage data, the Company is the data controller (or equivalent under PIPEDA). For records about your clients that you enter into the Service, you are the controller and the Company is a processor/service provider acting on your instructions. Your clients should direct privacy requests about their records to you; where required by law, we will assist you in responding.
3. How We Use Information
We use personal information to: provide and operate the Service; process payments and manage subscriptions; communicate with you about your account; improve and maintain the Service; and comply with legal obligations.
4. How We Share Information
We do not sell, rent, or trade your personal information. We share it only with:
CategoryPurposePayment processorProcess subscription paymentsHosting/infrastructure providersStore and run the ServiceAnalytics provider (Google Analytics)Understand website and Service usageAdvertising measurement (Meta Pixel)Measure ad performance on our marketing website, with consent where requiredLegal/regulatory authoritiesWhere required by law
We require service providers to handle data consistent with this Policy through contractual safeguards.
5. Data Security
We apply reasonable technical and organizational safeguards to protect personal information. No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials secure and maintaining backups of critical records.
6. Data Retention
We retain personal information while your account is active, plus a reasonable period afterward for legal, accounting, or dispute-resolution purposes. Accounts inactive for 6+ months may be terminated and data deleted, with prior notice.
7. International Data Transfers
Your information may be processed in Canada, the United States, or other countries where our providers operate. For EU/UK users, we rely on appropriate safeguards (such as Standard Contractual Clauses). For Quebec users, transfers outside Quebec are subject to an assessment of privacy protections as required by Law 25.
8. Your Rights
8.1 All Users
You may request access to, correction of, or deletion of your personal information by contacting support@lashassistpro.com. We will respond within the timeframe required by the law applicable to you.
8.2 Canada (PIPEDA) and Quebec (Law 25)
Canadian users may access and correct their information and withdraw consent, subject to legal limits. Quebec users additionally have rights to data portability and de-indexing under Law 25, and may complain to the Commission d'accès à l'information (CAI). Privacy Officer: CEO, reachable at support@lashassistpro.com.
8.3 EU/UK Users (GDPR and UK GDPR)
You have the right to access, correct, delete, restrict or object to processing of, and port your data; to withdraw consent; and to lodge a complaint with your supervisory authority.
8.4 United States
Depending on your state, you may have rights under state privacy laws (e.g., California CPRA and similar laws) to access, delete, correct, and opt out of certain processing. We do not sell personal information. Our marketing website uses advertising cookies (Meta Pixel), which may be considered "sharing" under some state laws; you can opt out through our cookie consent controls. Certain states (Washington, Nevada, Connecticut) provide additional rights over consumer health data, such as allergy and sensitivity information stored in the Service.
8.5 Other Jurisdictions
Contact support@lashassistpro.com and we will respond in accordance with the law applicable to you.
9. Children's Privacy
The Service is intended for professionals and is not directed at children. We do not knowingly collect personal information from individuals under 18.
10. Changes to This Policy
We may update this Privacy Policy. Material changes will be posted on this page and, where required by law, communicated via email at least 30 days before taking effect.
11. Contact Us
support@lashassistpro.com
Privacy Officer: CEO
2387273 Ontario Inc.
Ottawa, Ontario
Operated by 2387273 Ontario Inc.
Last Updated: July 7th 2026
Effective Date: July 22nd 2026
1. Overview
This Privacy Policy explains how 2387273 Ontario Inc. ("we," "us," "the Company"), operator of Lash Assist Pro ("LAP," "the Service"), collects, uses, discloses, and protects personal information.
This policy is intended to address the privacy laws applicable where our users are located, including Canada's PIPEDA and Quebec's Law 25, the EU GDPR and UK GDPR, and applicable US federal and state privacy laws, including state consumer health data laws. The Service is offered worldwide; where local law grants you additional rights, we will honor them as required.
2. Information We Collect
2.1 Information You Provide
Account information: name, email, business name, billing information (processed by our payment processor).
Business settings: your subscription plan, policies, waivers, and configured forms.
Client records you choose to enter: client names and contact details, session history, consultation form responses, allergy and sensitivity notes, photos, and product usage data.
Communications with our support team.
2.2 Information Collected Automatically
Usage data (features used, login activity, device/browser type).
Cookies and similar technologies, including Google Analytics and the Meta Pixel — see our Cookie Policy.
2.3 Sensitive Personal Information
Some client data you choose to store — particularly allergy and sensitivity notes and consultation form responses — may constitute sensitive personal information under PIPEDA, GDPR, and US state consumer health data laws. We do not require you to collect this information; it is collected only when you choose to enter it for your own client records. We do not sell it or share it with advertisers, and we use it only to display it back to you within the Service. You, as the artist/studio entering this data, are responsible for obtaining any consent from your own clients required under applicable law.
2.4 Our Roles: Controller and Processor
For your account, billing, and usage data, the Company is the data controller (or equivalent under PIPEDA). For records about your clients that you enter into the Service, you are the controller and the Company is a processor/service provider acting on your instructions. Your clients should direct privacy requests about their records to you; where required by law, we will assist you in responding.
3. How We Use Information
We use personal information to: provide and operate the Service; process payments and manage subscriptions; communicate with you about your account; improve and maintain the Service; and comply with legal obligations.
4. How We Share Information
We do not sell, rent, or trade your personal information. We share it only with:
CategoryPurposePayment processorProcess subscription paymentsHosting/infrastructure providersStore and run the ServiceAnalytics provider (Google Analytics)Understand website and Service usageAdvertising measurement (Meta Pixel)Measure ad performance on our marketing website, with consent where requiredLegal/regulatory authoritiesWhere required by law
We require service providers to handle data consistent with this Policy through contractual safeguards.
5. Data Security
We apply reasonable technical and organizational safeguards to protect personal information. No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials secure and maintaining backups of critical records.
6. Data Retention
We retain personal information while your account is active, plus a reasonable period afterward for legal, accounting, or dispute-resolution purposes. Accounts inactive for 6+ months may be terminated and data deleted, with prior notice.
7. International Data Transfers
Your information may be processed in Canada, the United States, or other countries where our providers operate. For EU/UK users, we rely on appropriate safeguards (such as Standard Contractual Clauses). For Quebec users, transfers outside Quebec are subject to an assessment of privacy protections as required by Law 25.
8. Your Rights
8.1 All Users
You may request access to, correction of, or deletion of your personal information by contacting support@lashassistpro.com. We will respond within the timeframe required by the law applicable to you.
8.2 Canada (PIPEDA) and Quebec (Law 25)
Canadian users may access and correct their information and withdraw consent, subject to legal limits. Quebec users additionally have rights to data portability and de-indexing under Law 25, and may complain to the Commission d'accès à l'information (CAI). Privacy Officer: CEO, reachable at support@lashassistpro.com.
8.3 EU/UK Users (GDPR and UK GDPR)
You have the right to access, correct, delete, restrict or object to processing of, and port your data; to withdraw consent; and to lodge a complaint with your supervisory authority.
8.4 United States
Depending on your state, you may have rights under state privacy laws (e.g., California CPRA and similar laws) to access, delete, correct, and opt out of certain processing. We do not sell personal information. Our marketing website uses advertising cookies (Meta Pixel), which may be considered "sharing" under some state laws; you can opt out through our cookie consent controls. Certain states (Washington, Nevada, Connecticut) provide additional rights over consumer health data, such as allergy and sensitivity information stored in the Service.
8.5 Other Jurisdictions
Contact support@lashassistpro.com and we will respond in accordance with the law applicable to you.
9. Children's Privacy
The Service is intended for professionals and is not directed at children. We do not knowingly collect personal information from individuals under 18.
10. Changes to This Policy
We may update this Privacy Policy. Material changes will be posted on this page and, where required by law, communicated via email at least 30 days before taking effect.
11. Contact Us
support@lashassistpro.com
Privacy Officer: CEO
2387273 Ontario Inc.
Ottawa, Ontario
