ShopBookGalleryJournalOur Story
Home
Legal · Privacy

Privacy
Policy.

Last updated: October 5, 2026

This is a starting template, not legal advice. It was drafted to get the business launched and should be reviewed by a qualified attorney before going live. Anything in [brackets] is a placeholder for the business owner to complete.

This Privacy Policy describes how this business (“we,” “us,” or “the business”) collects, uses, and shares information when you visit our website, shop our products, book an appointment, or join our newsletter.

1. Information we collect

  • Account & profile. Your name, email, phone number, and the hair details you choose to share (hair state, porosity, and notes for your stylist).
  • Orders. The products you buy, your shipping address, and order history. We never see or store your full card number — card data is handled directly by our payment processor (see below).
  • Bookings. The service you book, appointment date/time, and the deposit you pay.
  • Newsletter. The email address you submit to subscribe to our newsletter.
  • Technical & usage. Basic information your browser sends (e.g. device/browser type) and the local storage / cookie data described in section 4.

2. How we use it

  • To create and manage your account and Points loyalty balance.
  • To process orders, ship products, and confirm and remind you about appointments.
  • To send transactional email (order, shipping, and booking confirmations) and, if you opt in, the newsletter.
  • To operate, secure, and improve the site.
  • To comply with our legal and tax obligations.

3. Service providers who process your data

We share information only with the vendors that help us run the business. Each processes data on our behalf under its own privacy terms:

  • Stripe — payment processing. Card details go directly to Stripe; we never store them.
  • Supabase — accounts, profiles, orders, bookings, and loyalty data storage.
  • Cal.com — appointment scheduling and availability.
  • Resend — transactional email delivery and newsletter list management.
  • Vercel — website hosting and delivery.

We do not sell your personal information. See section 6 for our CCPA-style statement.

4. Cookies & local storage

We keep this light. The site uses your browser’s local storage and a small number of cookies for the things that make it work:

  • Cart — remembers the items in your shopping cart.
  • Referral code — remembers a friend’s referral link for up to 30 days so they get credited.
  • Authentication / session — keeps you signed in to your account.
  • Cookie consent — remembers that you dismissed the cookie notice.

You can clear or block this data in your browser settings, though some features (cart, sign-in) won’t work without it.

5. Data retention

We keep account, order, and booking records for as long as your account is active and as needed to provide services, resolve disputes, and meet tax and legal requirements (typically [RETENTION PERIOD, e.g. 7 years for transaction records]). When you delete your account (section 7), your profile and loyalty data are removed; order and booking records are retained but anonymized (disassociated from your account) so our financial history stays intact.

6. Your rights & choices

Depending on where you live, you may have the right to access, correct, or delete your personal information, and to opt out of marketing email.

  • Access & correction: view and edit your profile any time under your account.
  • Deletion: delete your account yourself from your account page (Profile tab → “Delete my account”), or email us to request it.
  • Newsletter: unsubscribe from any newsletter via the link in its footer.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. California residents (CCPA/CPRA) and residents of other states with similar laws may exercise their rights without discrimination by contacting us below.

7. How to exercise your rights

The fastest way to delete your data is the self-serve control on your account page. Please contact us directly to exercise your rights. We will respond within the time required by applicable law.

8. Children

The site is not directed to children under [AGE, e.g. 13], and we do not knowingly collect their personal information.

9. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, where required, notify you.

10. Photos and the gallery

We share photos of clients only with their consent. Gallery photos (including photos customers choose to share with us in the future) may be used on our website and in our advertising. To ask for a photo to be removed, let us know. Please contact us directly. See also Photos and the galleryin our Terms. Photos you share from your account are kept privately until we review them; photos we don’t publish or that you withdraw are deleted, location and camera data are removed, and you can remove a published photo yourself from Account → Appointments.

Questions about this policy? Please contact us directly.
← Back home

A hair practice and botanical apothecary for natural hair, made with ceremony, patience, and ingredients you can read out loud.

Shop

  • All products

Visit

  • Book an appointment
  • Services & pricing
  • Meet the founder
  • Policies
  • FAQ
© 2026
PrivacyTermsRefundsReturns