Legal
Privacy policy.
Last updated: October 2026
This is a short, plain-English summary of how Nails by Mona (a one-woman studio based in Mirpur, Azad Kashmir) handles your personal data when you order from us. If anything here is unclear, get in touch on WhatsApp and we'll explain.
What we collect
When you place an order, we collect: your name, email address, phone (and WhatsApp number if different), shipping address, your nail sizing photos (close-ups of your hands), and the payment proof you upload after sending the transfer. We also collect the city you ordered from so couriers know where to ship.
We collect basic analytics (page views, country, device type) via Google Analytics and Microsoft Clarity to understand which designs people respond to. This data does not identify you personally.
We also use the Meta Pixel to measure our Instagram and Facebook ads: which designs you view, what you add to your bag and whether an order is placed. When you fill in the checkout form, Meta may receive your email, phone number, name, city and country in a scrambled (hashed) form, so it can tell us whether an ad led to an order. Meta does not receive your address, your sizing photos or your payment details.
Why we collect it
- Name, address, phone: so your courier can find you.
- Email: so we can send your order confirmation, production updates, and shipping notification.
- Sizing photos: so Mona can make your nails to fit. They are looked at by Mona only, and used only for your order.
- Payment proof: so we can verify the payment matched the order, and resolve any disputes.
Where it lives
All of the above sits in a private database on our hosting provider, secured by TLS and password authentication. Your sizing photos and payment proofs are kept on private storage. There is no public link to them. They can only be viewed by Mona after she logs into the admin panel.
Who we share it with
- Couriers (TCS, Leopards, M&P, BlueEx, whichever serves your route): name, phone, full address, and the package weight. That is all they get.
- Our email provider (Brevo): your email address only, so we can send order updates.
- Meta (Instagram and Facebook): the ad measurement data described above, in scrambled form.
- Nobody else. We do not sell your data. We do not share your sizing photos with anyone, ever.
How long we keep it
Order records, including sizing photos, are kept indefinitely so that returning customers don't have to re-send measurements. If you want your data deleted, message us on WhatsApp and we'll remove everything within 7 days, except the minimum we need to keep for tax records (typically the order total + date, no personal details).
Cookies
We use a single session cookie to keep your bag and order flow working as you move between pages. It does not track you between visits. Analytics tools may set their own cookies for visit counting.
Your rights
You can ask us at any time for a copy of the data we hold on you, ask us to correct it, or ask us to delete it. WhatsApp us at Message us on WhatsApp or email [email protected] and we'll respond within 7 days.
Children
We do not knowingly collect data from anyone under 16. If you're a parent and believe your child has placed an order without your permission, contact us and we'll cancel and refund it.
Updates
If we change anything material here, we'll update the "last updated" date at the top of this page. For substantial changes we'll email anyone with an active order.