PMUezy Public Data Retention and Deletion Policy

External policy or terms | Version 1.0 | 2 October 2026

This policy explains how PMUezy and Salons distinguish account deletion from retention of treatment information. It complements the Privacy Notice and the Salon's own retention notice. Contact privacy@pmuezy.com for assistance or direct your request to the Salon controlling the record.

1 Client accounts

Clients may initiate deletion in the app or website. Following proportionate verification, ordinary account data is removed from active systems within 30 days, subject to necessary and explained legal exceptions. The GDPR response period is normally one month and applies independently. Before deleting an account inactive for 24 months, we give a warning and an opportunity to keep it active.

2 Salon records

The Salon decides a justified retention period for bookings, treatment records, signed consent forms and documentation images. PMUezy supplies a configurable five year default; this is not a statement of a universal legal minimum. Your treatment record can remain with the Salon after a Client login closes. You can still request a copy, correction, erasure or restriction. The Salon must consider the applicable legal basis and exceptions, explain any refusal and inform you of complaint rights.

Chat is normally deleted 12 months after the last message. Relevant information may be separately retained in lawful treatment documentation, with its purpose and retention explained. Marketing image copies are reviewed at one year with a reminder to the Salon. The Salon is responsible for timely removal, including earlier withdrawal or permission expiry.

3 Ending a Salon subscription

At the end of service, a Salon receives 60 days of read only access for authorised export. It cannot add new records during that period. After 60 days PMUezy deletes active Salon records unless a particular legal requirement requires restricted retention. The Salon may separately retain the exported records lawfully and remains responsible for them. This export window does not extend a marketing consent or justify retention contrary to a valid erasure instruction.

4 Backups and exceptions

Daily encrypted backups roll off within 30 days after active deletion. They are isolated from ordinary use, and if restored, prior deletion and restriction instructions are reapplied. A specific legal hold retains only what is necessary, restricts use and is reviewed. Financial records of PMUezy are normally retained for six years under applicable Irish requirements; this is not permission to keep all clinical records for accounting purposes. Provider retention is governed by applicable roles and contracts, not simply by how long Stripe retains its own data.

5 Making a request

Tell us or the Salon what you need and enough information to locate the record. We do not require you to know an Article number. We verify identity proportionately, protect other people's data and explain any lawful extension or refusal. Complaints may be made to the Data Protection Commission, NAIH or another competent supervisory authority. Our internal processes do not prevent court remedies.