Privacy Policy

1. What Information We Collect

The information we collect falls into two categories: information you provide directly to us, and information collected automatically when you use our website. The following describes the specific information we collect from you:

Information You Provide Directly

• Contact information: your full name, phone number, email address and mailing address (if provided)
• Appointment information: service preferences, booking history, technician preferences, scheduled appointment dates and times
• Payment information: credit card or debit card details, processed securely by our PCI-compliant payment provider. We do not store full credit card numbers on our systems
• Communications: messages, questions, feedback or requests you send to us through online forms, email, SMS text message, phone calls or social media
• SMS opt-in consent: when you opt in to receive text messages, we collect your mobile phone number and your consent record
• Marketing preferences: your preferences for receiving promotional communications

Information Collected Automatically

• Device and browser information: IP address, browser type, device type, operating system, screen resolution
• Usage information: pages visited, time spent on pages, links clicked, referring website, date and time of access
• Location information: general geographic location based on IP address
• Cookies and similar tracking technologies: see Section 5 for full details on cookie and tracking information

2. How We Use Your Data

We use your data and personal information for the following specific purposes:

• To provide services: schedule, confirm and remind you about your appointments at Herbal Nails & Spa Brea
• To process payments: handle billing and payment for services rendered
• To send SMS messages: deliver appointment reminders, booking confirmations, promotional offers and salon updates (only if you have opted in)
• To communicate with you: respond to your inquiries, feedback, complaints or service requests
• To improve our services: analyze how clients use our website and services to enhance the customer experience
• To send marketing communications: send promotional offers, seasonal specials and salon news (only if you've opted in)
• To comply with legal obligations: meet legal, regulatory, tax and accounting requirements
• To protect against fraud: detect and prevent fraudulent transactions, abuse or unauthorized access
• To enforce our policies: enforce our Terms of Service and other agreements

3. SMS Opt-In Details & No-Sharing Policy

Herbal Nails & Spa Brea operates an SMS text messaging program for clients who have opted in. SMS opt-in details are described below in full.

How to Opt In

You may opt in to receive SMS text messages from Herbal Nails & Spa Brea in any of the following ways:

• Submitting our online opt-in form on herbalnailsbrea.com with the consent checkbox marked
• Providing your phone number and verbal or written consent at our salon location
• Texting us first to initiate communication
• Providing your phone number when booking an appointment and agreeing to receive SMS communications

By opting in, you give your express written consent to receive text messages from Herbal Nails & Spa Brea at the mobile phone number you provided.

SMS Opt-In No-Sharing Policy

This is our explicit, formal statement regarding the sharing of SMS opt-in data:

To be absolutely clear:

• We do not sell your mobile phone number or SMS opt-in consent to any third party
• We do not share your mobile phone number or SMS opt-in consent with any third party for marketing purposes
• We do not rent or transfer your SMS opt-in consent or phone number for affiliate marketing
• Your phone number is used only for direct communication between you and Herbal Nails & Spa Brea

4. Sharing & Disclosure

We do not sell your personal information. Outside of SMS opt-in data (which is never shared as described in Section 3), we may share other personal information only in these limited circumstances:

• Service providers: trusted vendors who help us operate our business, including payment processors, scheduling software, website hosting providers and SMS gateway providers. These providers are contractually bound to protect your information and use it only for the purpose we've engaged them for
• Legal requirements: when required by law, court order, subpoena or government request
• Business transfers: in the event of a merger, acquisition or sale of business assets, with appropriate notice to you
• Protect rights and safety: to protect the rights, property or safety of Herbal Nails & Spa Brea, our clients, employees or others
• With your explicit consent: any other sharing only with your direct permission

5. Cookies & Tracking Information

Cookies and tracking technologies are used on our website to enhance your browsing experience. This section explains what cookies we use, why we use them and how you can control them.

What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They help websites remember your preferences, recognize you on return visits and analyze how visitors use the site.

Types of Cookies We Use

• Essential cookies: required for the website to function properly, including booking forms, secure logins and shopping cart features
• Performance cookies: help us understand how visitors interact with our website by collecting anonymous analytics data
• Functional cookies: remember your preferences such as language settings and previously viewed pages
• Marketing cookies: may be used to track ad effectiveness and deliver relevant promotional content

Third-Party Tracking

We may use third-party analytics services such as Google Analytics and Facebook Pixel to understand how visitors interact with our site. These services may collect anonymized data including page views, session duration, device type and general location information.

How to Control Cookies

You can control or disable cookies through your browser settings. Most browsers allow you to refuse all cookies, accept only certain cookies or alert you when a cookie is being set. Please note that disabling certain cookies may affect site functionality.

6. Data Security Practices

Our data security practices are designed to protect your personal information from unauthorized access, disclosure, alteration or destruction. We implement the following security measures:

• Encryption: our website uses SSL/TLS encryption to protect data transmitted between your browser and our servers
• PCI compliance: payment processing is handled by PCI-DSS compliant third-party providers. We do not store full credit card numbers on our internal systems
• Access controls: personal information is accessible only to authorized employees and contractors who need it to perform their job functions
• Secure storage: data is stored on secure servers with restricted access and regular security updates
• Employee training: our staff is trained on data protection and privacy practices
• Regular reviews: we regularly review our security measures and update them as needed

While we strive to protect your data using reasonable administrative, technical and physical safeguards, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but we work hard to minimize risk.

7. Data Retention

We retain your personal information only as long as necessary to:

• Provide our services and maintain your account
• Comply with legal, tax, accounting and regulatory obligations
• Resolve disputes and enforce our agreements
• Maintain business records as required by law

When information is no longer needed for these purposes, we securely delete or anonymize it. SMS opt-in records are retained as required by FCC and TCPA regulations for proof of consent.

8. Age Restriction & Children's Privacy

Age Restriction (18+): our website and SMS program are intended for individuals 18 years of age and older. By using our website, opting in to SMS communications or providing personal information, you confirm that you are at least 18 years old.

We do not knowingly collect personal information from anyone under 18 years of age. Children under 18 may receive services at our salon only with the consent and presence of a parent or legal guardian, who is responsible for providing any required information on their behalf.

If you believe we have inadvertently collected information from a minor under 18, please contact us immediately at (714) 494-1398 so we can delete the information.

9. Your User Rights (Unsubscribe, Update, Delete)

You have the following user rights regarding your personal information. Depending on your jurisdiction (including California residents under the CCPA and CPRA), you may have the right to:

Right to Access

You have the right to request access to the personal information we hold about you and receive a copy of that information.

Right to Update or Correct Information

You have the right to request correction of inaccurate, incomplete or outdated personal information. To update your information, contact us using the details in Section 11.

Right to Delete Information

You have the right to request deletion of your personal information, subject to legal exceptions (such as records we must retain for tax, regulatory or legal purposes).

Right to Unsubscribe

You have the right to unsubscribe from marketing communications at any time:

• SMS unsubscribe: reply STOP to any text message from us to unsubscribe immediately
• Email unsubscribe: click the "unsubscribe" link at the bottom of any marketing email
• Direct request: contact us by phone, email or in person to request removal from all marketing lists

Right to Opt Out of Sale or Sharing

We do not sell your personal information. We do not share your SMS opt-in data with any third parties for marketing purposes. California residents have the right to opt out of any future sale or sharing of personal information.

Right to Non-Discrimination

You have the right to not be discriminated against for exercising any of your privacy rights. We will not deny services, charge different prices or provide lower quality service based on your privacy choices.

Right to Withdraw Consent

You may withdraw consent for data processing or SMS communications at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, contact us using the details in Section 11. We will respond to verified requests within the timeframes required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and may notify you by email or text message where appropriate. We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns or requests regarding this Privacy Policy or your personal information, including how to exercise your user rights, please contact us using the details below. We will respond to all inquiries promptly.