Training & Career · 23 July 2026 · 8 min read
PMU Complaint Handling and Incident Response
A calm PMU complaint-handling framework covering acknowledgement, records, safety triage, insurer escalation, data breaches and business learning.
By Powdrr Academy, PMU Education & Business Team
A complaint is not automatically proof of poor treatment, and a calm response is not an admission of liability. It is a structured way to protect the client, preserve evidence, understand the issue and make an appropriate decision.
The short answer: acknowledge promptly, check whether urgent health or safety action is needed, preserve the complete record, notify the insurer when required, investigate without diagnosing or arguing, then give a clear written outcome and log improvements.
Your insurer and legal adviser should shape the final policy. If someone may need urgent medical help, direct them to the appropriate urgent or emergency service rather than attempting to diagnose in messages.
Separate the type of concern
| Concern | Immediate priority | Typical route |
|---|---|---|
| Expectation or service | Listen, preserve records and understand the requested resolution | Complaint procedure and insurer advice where relevant |
| Possible health complication | Recognise urgency, stay within scope and support medical assessment | Emergency or healthcare route plus insurer/incident process |
| Product or equipment issue | Stop use where appropriate and secure traceability evidence | Quarantine, supplier/manufacturer and relevant reporting route |
| Personal-data breach | Contain, assess risk, document and consider notification duties | Data-breach response and ICO guidance |
| Threatening behaviour | Personal safety and preservation of evidence | Lone-working, police or other appropriate route |
One event may fit more than one row. Run the safety and evidence steps in parallel rather than waiting for a polished complaint letter.
Use the first response to stabilise
Acknowledge receipt, thank the client for raising the concern, give a realistic response time and explain what information you need. Avoid blame, defensive voice notes or public debate. Move sensitive conversation into a secure channel and do not promise a remedy before you understand the facts and insurer position.
Ask neutral questions: what happened, when did it begin, what has changed and what help has already been sought? For a potential health concern, do not use photographs to rule out a complication.
Preserve the complete record
- Original enquiry, booking terms and payment record
- Screening, consultation, consent and change-of-circumstance answers
- Mapping, photographs under the permissions given and treatment notes
- Products, batches, device, cartridge and relevant room records
- Aftercare supplied and all follow-up communication
- A dated incident chronology and the people involved
Do not rewrite an original record. Add a clearly dated supplementary note if clarification is necessary. Link product questions to the PMU batch-traceability guide and privacy to the PMU GDPR guide.
Investigate within professional boundaries
Notify the insurer at the stage and in the form the policy requires, particularly before admitting liability, offering treatment or agreeing compensation. Check whether legal advice, manufacturer input, council notification or another professional route is needed.
Compare the record against training, product instructions, agreed plan and studio procedures. Separate known facts, the client’s account, your observations and unresolved questions. If the artist involved investigates their own work, add an appropriate independent review where the seriousness warrants it.
Respond clearly and close the loop
The final response should summarise the concern, steps taken, evidence considered, outcome, any remedy, safety advice within scope and the route for further review. Use plain language. Keep the tone respectful even when the evidence does not support every allegation.
Then run a learning review that does not depend on blame:
- What allowed or contributed to the issue?
- What detected it, and how quickly?
- Which control worked?
- Which instruction, form, skill or handoff needs change?
- Who owns the action and how will completion be checked?
Feed genuine learning into the PMU CPD plan.
Handle personal-data breaches separately
If personal data is lost, sent to the wrong person, accessed without permission or made unavailable, contain the issue and assess risk promptly. The ICO says all personal-data breaches should be documented. Where a breach is reportable, notification is required without undue delay and, where feasible, within 72 hours of awareness.
Use the ICO’s small-business 72-hour guide. Do not delay the assessment until the treatment complaint is resolved.
Frequently asked questions
Should a PMU artist refund immediately after a complaint?
First protect safety, preserve evidence and check contractual, consumer-law and insurer requirements. A prompt acknowledgement matters, but an uninformed promise can make resolution harder.
Can I ask a client to send a photograph of a concern?
A photograph may add information if collected securely, but it cannot safely rule out a complication. Give appropriate escalation advice and remain within competence.
Should a PMU complaint be discussed on social media?
No individual complaint should be investigated publicly. Respond briefly without revealing client information and move the matter to the documented private process.
When must a personal-data breach be reported?
Reporting depends on the risk and facts. Assess promptly using current ICO guidance; certain breaches must be reported without undue delay and, where feasible, within 72 hours.
Prepare before a concern arrives
Write the route, insurer contacts and record checklist before pressure is high, then rehearse it with the team. For broader professional-practice foundations, explore Powdrr’s PMU training or take the Powdrr quiz.
Frequently asked questions
Should a PMU artist refund immediately after a complaint?
First protect safety, preserve evidence and check contractual, consumer-law and insurer requirements before promising a remedy.
Can I ask a client to send a photograph of a concern?
A securely collected photograph may add information but cannot rule out a complication. Give appropriate escalation advice.
Should a PMU complaint be discussed on social media?
No. Respond briefly without revealing client information and move the matter into the documented private process.
When must a personal-data breach be reported?
Assess promptly using current ICO guidance. Certain breaches require reporting without undue delay and, where feasible, within 72 hours.