Introduction
Elegance Hair Studio ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
Information We Collect
Personal Information
- Name and contact information (email, phone number)
- Account credentials
- Payment information (processed securely through third-party processors)
- Communication preferences
Automatically Collected Information
- IP address and location data
- Browser type and version
- Device information
- Usage data and analytics
- Cookies and similar technologies
How We Use Your Information
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send administrative and promotional communications
- Respond to inquiries and customer support requests
- Monitor and analyze usage patterns
- Detect and prevent fraud and security issues
- Comply with legal obligations
Data Sharing and Disclosure
We may share your information with:
- Service Providers: Third parties who perform services on our behalf
- Business Transfers: In connection with mergers, acquisitions, or asset sales
- Legal Requirements: When required by law or to protect our rights
- With Your Consent: When you explicitly agree to sharing
We do not sell your personal information to third parties.
## Privacy Rights (US Users) ### California (CCPA/CPRA) If you are a California resident, you have the right to: - Know what personal information is collected - Know if personal information is sold or shared - Say no to the sale of personal information - Access your personal information - Request deletion of personal information - Equal service and price **Do Not Sell My Personal Information**: We do not sell personal information. ### Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA) Residents of these states have similar rights including: - Right to access, correct, and delete personal data - Right to opt-out of targeted advertising - Right to opt-out of profiling ## Privacy Rights (Canadian Users - PIPEDA) Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA): - We obtain consent before collecting personal information - You can withdraw consent at any time - You have the right to access and correct your information - We limit collection to what's necessary - We retain data only as long as needed **Privacy Commissioner of Canada**: You may file a complaint with the Office of the Privacy Commissioner if you believe your privacy rights have been violated. ## Privacy Rights (Asian Users) ### Singapore (PDPA) - Right to access and correct personal data - Right to withdraw consent - Organizations must appoint a Data Protection Officer ### Japan (APPI) - Right to disclosure, correction, and deletion - Restrictions on third-party data provision ### South Korea (PIPA) - Right to access, correct, and delete personal data - Must obtain explicit consent before collection
Data Security
We implement industry-standard security measures including:
- Encryption of data in transit and at rest (TLS/SSL, AES-256)
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Employee training on data protection
- Incident response procedures
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When data is no longer needed, we securely delete or anonymize it.
Cookies and Tracking
We use cookies and similar technologies for:
- Essential Cookies: Required for site functionality
- Analytics Cookies: Help us understand usage patterns
- Preference Cookies: Remember your settings
- Marketing Cookies: Deliver relevant advertisements (with consent)
You can control cookies through your browser settings. See our Cookie Policy for details.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through:
- EU-US Data Privacy Framework compliance
- Standard Contractual Clauses
- Adequacy decisions by relevant authorities
Children's Privacy
Our services are not intended for individuals under 18 (or under 16 in the EU). We do not knowingly collect personal information from children. If we discover we have collected such information, we will delete it immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Email: contact@elegance hair studio.com