Privacy Policy

Defined PMU is the controller of the personal data described on this page. The studio is at Albertinkatu 5, 00150 Helsinki, Finland, and its business identity code (Y-tunnus) is 3630385-5.

Questions, corrections, and requests to see or delete your data can be raised in writing at that address, or with the practitioner at your appointment.

Reading this site collects nothing. There is no analytics, no advertising or tracking pixel, no social embed, no profiling, no account to create and no newsletter to join. You can browse every public page — the treatments, the results, the studio, the prices — without anything being stored on your device and without anything being recorded about you.

Things are stored only when you do something that needs them: book an appointment, pay for it, open your Client Card, apply to model for the studio, or agree to the one optional cookie described below. Those are listed one by one in the next section.

Two things reach a third party only when you ask them to: opening directions hands your route to Google Maps or Apple Maps, and paying loads Stripe's payment form into the booking page at the point you reach it. Both are then covered by those companies' own privacy terms. Until you use them, nothing is sent.

Like any website, the server that delivers these pages records ordinary technical request data. It is used to keep the site running and secure, not to build a picture of you.

A cookie is a small piece of text a site stores in your browser. Every cookie below is set by Defined's own domain — none of them are advertising cookies, none of them follow you to other websites, and the studio has no third-party trackers to disclose because it uses none.

Essential — always on. These exist because you asked for the thing they do. They cannot be switched off without breaking it.

• Your cookie choice — records the answer you gave to the question below, so you are not asked again. Kept for 12 months.
• Booking handover — set only when you press “Book” on your Client Card, so the booking form opens with your own details already in it. Expires 20 minutes later, or as soon as it has been used once.
• Payment security — when you reach the payment step, Stripe's payment form is loaded and sets two cookies of its own for fraud prevention. They are not set while you are browsing or choosing a time, only once you have asked to pay. Stripe describes them in its own privacy policy.
• Practitioner sign-in — the studio's own staff session for the admin area. It is never set on a client's browser.

Optional — only with your permission.

• Referral attribution — if you arrived through an invitation from an existing client and you allow it, this remembers that fact for 30 days, so the referral can be recognised if you go on to book. It holds one identifier for the invitation link and nothing about you: no name, no contact details, no browsing history, and nothing about your health. Nothing is stored unless you choose to allow it.

Refusing the optional cookie costs you nothing. You can read the site, book, pay, be confirmed and use your Client Card exactly as before — the only thing lost is that the client who introduced you will not be credited.

Your choice can be changed at any time from Cookie settings at the foot of any page. Switching referral attribution off removes that cookie from your device immediately.

To book and run an appointment, the studio needs:

• your name
• your email address
• your phone number
• the treatment, date and time you booked
• for a top-up, roughly when your previous treatment was, so the right appointment length is set aside

This is processed to provide the service you asked for and to reach you about it: a confirmation, a reminder, or a change to your appointment. It is not used to market to you.

Part of the price is paid when you book. The card details themselves are entered into a form belonging to Stripe, the studio's payment processor, and travel to Stripe rather than to Defined — the studio never sees or stores a card number. What it keeps is the record it needs to run the appointment and its accounts: the amount paid, the amount still due at the studio, whether the payment succeeded, and Stripe's reference for it.

Before your appointment you complete a health questionnaire. Your answers are health data, a special category under Article 9 of the GDPR, and they are treated more carefully than the rest.

• They are collected on the basis of your explicit consent, given when you submit the questionnaire. You can withdraw that consent at any time; withdrawing it does not undo processing that already happened.
• They are kept apart from ordinary contact details, and only the practitioner sees them.
• They are never used for marketing, never included in analytics, never written into application logs, and never sent in an ordinary email.
• The questionnaire is reviewed by the practitioner, who decides whether treatment can go ahead. Software does not make that decision, and there is no automated decision-making or profiling anywhere in this service.

If you would rather not answer a question online, say so. You can go through the questionnaire with the practitioner instead.

When an appointment is confirmed, the studio issues you a Client Card: a private page of your own, reached by a link in your confirmation email. It is not a new collection of data. It shows you, in one place, what the studio already holds about your appointment.

What appears on it:

• your name and contact details, as you gave them when booking
• your upcoming appointment — the treatment, the date and the time
• what has been paid and what is still due at the studio, and the payment's reference
• whether your health questionnaire has been completed, so you know if anything is outstanding
• where you are in the treatment cycle — healing, when a top-up becomes appropriate, when a refresh is due — and how many treatments you have had
• your referral link, if you want to pass one on
• your Defined Credit balance and its recent history — what was earned, used or expired, and when

Your health questionnaire answers are never shown on the Client Card. It reports only that the questionnaire is done or not done. The answers themselves stay where they are described in the section above, seen by the practitioner and nobody else, and no part of the card can reach them.

The card is used to give you your own appointment details, to let you book again safely, and to reach you about the service. The link is the key to it, so it is worth treating like one:

• the link contains a long random value, generated so it cannot be guessed
• that value is not stored in the studio's database — only a one-way fingerprint of it is, which is enough to recognise your link and not enough to reconstruct it
• the page is excluded from search engines and is not cached by your browser
• the studio can revoke a card and issue you a new link — if you lose your phone, ask

A card link stays valid for up to two years unless it is revoked or replaced sooner. That length is deliberate: a lip treatment has a top-up a few weeks later and a refresh a year or more after that, and the card is meant to still work when you need it.

Clients can pass on an invitation. Your Client Card carries a referral link of your own, which you can copy, share or show as a code. The link contains an identifier for the invitation and nothing else — it opens no page of yours, reveals nothing about you, and cannot be turned back into your name, your contact details or your treatment history by anyone holding it.

Somebody who follows your invitation lands on an ordinary page about the studio. They are not told who invited them, and the site has no way to tell them: the page never receives your identity. Following the link on its own records nothing about the visitor and creates no referral.

If, and only if, they allow the optional cookie described above, their browser remembers for 30 days that they arrived through an invitation. If they then book, that booking is noted as having come through it. The referral counts only once the treatment has actually taken place and the practitioner has marked it completed — not when it is booked and not when it is paid for.

A qualifying referral earns the client who made it €25 of Defined Credit, which comes off the amount due at the studio on a future appointment. The terms are set out under Referrals and Defined Credit.

Where a referral has completed, the studio keeps a record of it: which client introduced which appointment, and when it qualified. It also keeps a record of the credit itself — every amount earned, used, returned or expired, with the date and the reason. Both are kept so the programme can be administered honestly: so it can be counted, checked, corrected if an appointment is later undone, and explained to you if you ask what your balance is made of.

Your credit balance and its history are shown on your own Client Card. The studio can see them too. Nothing about referrals or credit is used for advertising, and none of it is shared with anyone outside the studio.

You are never told who used your link, and they are never told who invited them. Your Client Card says “Referral completed” and the amount — not a name, not a treatment, not a date of somebody else's appointment.

Defined selects models from time to time for Lip Blush and Lip Neutralisation appointments, so that it has photography and film of its own work. Applications are taken on a page of its own and stay open continuously. This is what applying collects and why.

What you give: your first name, your email address, your phone number, which treatment interests you, which days of the weekend could usually suit you, optionally a sentence about what you are hoping for, and optionally an Instagram or TikTok handle. Nothing else is asked and nothing else is recorded.

No health information is collected. The application form asks no medical question of any kind — nothing about medication, pregnancy, allergies, skin or medical history. Whether a treatment is suitable is assessed only after somebody is selected and booked, through the health questionnaire described above, which is a separate form with the separate protections set out in that section.

What you agree to. Two things, both by ticking a box you cannot submit the form without:

• that selected model appointments are photographed and filmed for Defined's portfolio, website and social media — including close-up content of your lips before, during and immediately after the treatment — with your face not needing to appear
• that Defined may contact you by email or phone about the application

The photography agreement is an acknowledgement made when applying, not a signed release. Anybody actually selected agrees the terms of the photography with the practitioner before the appointment, and can change their mind. Applicants are never asked to post anything on their own social media, and nothing is ever posted on anybody's behalf.

Applying costs nothing and books nothing. A model appointment, if one is offered to you, is a paid appointment at a reduced rate — the price is on the application page — and you may decline it.

Applications are private. There is no comment, no tag, no public list and no way for anyone but the studio to see who has applied. Applications are kept apart from client records: an application is not a booking, is not linked to one, and being an applicant does not make anybody a client of the studio or put them on any mailing list.

Applications are used for one thing: reading them, and contacting people who may suit a model appointment the studio is about to have. They are not used for marketing and are not shared with anyone outside the studio. Because applications stay open rather than closing on a date, the studio has not yet set a fixed period after which an application it did not act on is deleted. Until it does, you can ask at any time to see your application or to have it removed, and it will be.

Your data is not sold, and it is not shared for anyone else's marketing.

The studio uses service providers to run parts of its operation: website hosting, the booking database, payment processing and transactional email. A provider may only process your data on the studio's instructions, under a written data processing agreement. Where a provider processes data outside the EU or EEA, that transfer relies on a European Commission adequacy decision or on the Commission's standard contractual clauses.

Data may also be disclosed where Finnish law requires it, such as accounting records that must be retained.

Appointment and contact details are kept while you are a client of the studio, and afterwards only for as long as there is a reason to: so a later top-up can be matched to the treatment it follows, or because bookkeeping law requires a record of the transaction to be retained.

Health questionnaire answers are kept for as long as they are relevant to your treatment and to the practitioner's duty to document it, and are then deleted.

Four things have a stated life of their own:

• a Client Card link stays valid for up to two years, unless it is revoked or replaced sooner
• the optional referral attribution cookie lasts 30 days, and disappears sooner if you withdraw it
• your cookie choice is remembered for 12 months, and you can change it at any time
• Defined Credit expires 12 months after it is earned; the ledger entry that records it having been earned, used or expired is kept afterwards, so the programme can be audited

Model applications are held while the studio is still considering them, and are never kept as a contact list or used for marketing. They are the one thing on this page with no period stated: because applications stay open rather than closing on a date, the studio has not yet set how long an application it did not act on is kept. Ask for yours to be removed and it will be, at any time and without a reason.

You can ask at any time what is held about you and ask for it to be deleted. Where something must be kept by law, you will be told what and why.

Under the GDPR you can ask the studio to:

• tell you what personal data it holds about you, and give you a copy
• correct anything inaccurate or incomplete
• delete your data
• restrict how it is used, or object to a particular use
• give you the data you provided in a portable form, or send it to another controller
• stop processing that relies on consent, including your health questionnaire answers, by withdrawing it

Requests are free and are answered within one month. The studio may need to confirm who you are before releasing anything.

If you think your data has been handled wrongly, you can complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), at tietosuoja.fi.

This page describes the studio's systems as they actually work today, including online booking, payment, the Client Card and referrals. When something is added or changed, this page is updated before it goes live and the date below changes with it.

If a future change means storing something new on your device, you will be asked about it — an answer given to the question as it stands today does not carry over to a question you have not been shown.