PMUezy Photo Media and Electronic Records Policy

External policy or terms | Version 1.0 | 2 October 2026

This policy applies to Salon forms, signatures, photographs, videos and public media within PMUezy. The Salon determines treatment documentation requirements and acts as controller. PMUezy provides the software as processor for those records; it does not approve clinical or consent wording.

1 Separate purposes

A treatment image retained to document care is different from a marketing copy placed on a website, social account, public feed or advertisement. The Salon must establish the appropriate Article 6 basis and, when health information is revealed, Article 9 condition for each purpose. Optional marketing permission must be separate, specific as to channels and images, informed and freely given. Refusal must not be treated as permission or a condition of the PMUezy account.

2 Capture and access

Artists may capture images for authorised Salon purposes. Before and after images are associated with the relevant Client and accessible through that Client's app. Clients can download available photos. Artist downloads require the Client permission specified by the Salon's lawful process and authorised role access. Marketing permission does not remove the need for security controls on local devices. Video recording uses the Salon device's camera and microphone permissions; do not record others without the necessary notice and authority.

Use private storage by default. Public publication is a separate action requiring permission checks. Remove unnecessary faces, metadata and background information where possible. Do not upload another person's work as your own. The Salon must secure rights from photographers and workers; possession of a file does not prove copyright ownership.

3 Signed records and corrections

The Salon creates and selects forms; Clients complete and sign them. Record the exact form version, answers, signature and date and time. Generate a PDF and provide the Client a copy. Prior versions are preserved; artists must not overwrite Client answers. Correct errors by a linked supplementary record or new Client confirmation with an audit trail. IP address or device identifier collection is not represented as part of signature evidence in this model.

Electronic form does not alone deprive a signature of legal effect, but PMUezy does not promise that its signatures are qualified, independently identity verified, or sufficient for every legal or clinical purpose. The Salon remains responsible for informed treatment consent and required local formalities. Lack of a self service download button for some records does not remove a person's right to request a copy.

4 Retention and withdrawal

Treatment records and documentation images use a configurable five year default, subject to a lawful Salon decision on the period and its starting event. There is no general assertion that every PMU record must legally be retained for five years. Account deletion does not by itself delete separately justified Salon records, but the Salon must assess erasure and restriction requests individually.

For marketing copies, the one year point prompts a Salon review. PMUezy sends a reminder; the Salon must remove the copy or establish a valid continuing permission and necessity. Where a permission is time limited, publication stops at expiry even if the reminder is missed. Withdrawal ends future consent based marketing use promptly. Remove controlled public copies and instruct relevant recipients as required; explain practical limits for independently copied material without treating them as permission for continued use.

5 Prohibited secondary use

PMUezy does not use uploaded works for its own marketing, perform facial recognition, analyse them with AI or send them to AI services. A before and after overlay is ordinary image processing, not AI analysis. Do not alter images to mislead about treatment results. Security or rights concerns may be sent to privacy@pmuezy.com; public content reports also go to support@pmuezy.com.