Privacy Policy

1. Who we are

BZHair Beauty LLC is a colour studio and wash bay business operating from a single location in Magna, Utah. The company offers precision cuts, colour and foil work, deep treatments, blowout and styling, scalp care rituals, and bridal and event hair. The studio address is 7615 W Jefferson Rd, Magna - 84044-3307, United States (US).

For the purposes of this policy, BZHair Beauty LLC is the controller of the personal information described below. The developer name BZ Hair Beauty appears in this introduction because the website and its intake tools were built and are maintained by that developer on behalf of the company. Where this policy says we, us or our, it refers to BZHair Beauty LLC and the developer acting together on studio business.

You can reach the studio about anything in this policy at projects@bzhairbeauty.autos or on +16802679586 during business hours. We aim to answer privacy questions within five business days, and always within the time limits that apply law.

2. Scope of this policy

This policy covers the public website at www.bzhairbeauty.autos, any message you send through the contact form, any note you send by email or telephone, and the paper or digital record cards we keep for guests of the studio. It does not cover third party websites that we link to, and it does not cover services that a separate business provides under its own name.

The website is written for adults who are arranging hair services for themselves or for another person, provided that permission has been granted by that person. Nothing on this site is directed at children, and we do not knowingly collect information from anyone under the age of thirteen.

When a guest arrives at the studio, a separate notice card sits at the mixing shelf and explains the record card in person. The card and this page describe the same practices, and where they differ the shorter card governs only the in-studio record, never the website.

3. Information we collect

We keep the collection small on purpose. The categories below describe everything that may reach our records, and most guests touch only the first three.

Contact details

Name, email address, telephone number and, when a guest chooses to provide it, a mailing address for a receipt. The contact form asks for a name, an email address, a subject line and a message. Nothing else is required to send a note.

Appointment details

The service requested, the date and time of the appointment, the stylist assigned, the duration of the visit and any notes about changes or cancellations. This information is needed to hold a place at the basin and to plan the working day.

Hair and service records

The shade formula, the developer volume, the timing of the application, the products used, patch test results, and short observations about the condition of the hair and scalp. These notes exist so that a repeat visit can start from a known place instead of a guess. They are kept on a written card at the shelf and are not published anywhere.

Messages and correspondence

The content of emails, contact form submissions, text messages and notes taken during a telephone call. We keep these so that a question asked on Monday can be answered correctly on Friday.

Payment records

The date, amount and method of a payment, together with the record number issued by the payment processor. We do not store full card numbers on the studio system, and card details are entered directly into the processor terminal.

Technical information

When you visit the website, the hosting provider records standard request information such as the page requested, the time of the request, the referring page, the browser type and an approximate region derived from the network address. This information is used for security and for keeping the site available, and it is not combined with appointment records.

Preferences

Notes about the styling you prefer, the products you like, the temperature of the water you find comfortable and any accessibility needs at the basin. These preferences are optional and are recorded only when a guest asks us to remember them.

4. How we collect information

The studio collects information in four ordinary ways. First, directly from you when you write through the contact form, send an email, call the studio or speak with us at the shelf. Second, automatically when a browser requests a page from the website. Third, from the payment processor when a payment is completed. Fourth, from a person who books on your behalf, but only when that person confirms that you have given permission.

We do not buy personal information from data brokers, we do not scrape public profiles, and we do not run advertising trackers that follow a visitor from one website to another. If a future practice would change any of those statements, this page will be updated first and the change will be announced at the top of the page.

5. Why we use information

Personal information is used for the following purposes, each of which is tied to a service that a guest has asked for.

• To reply to a question sent through the contact form or by email.
• To confirm, move or cancel an appointment at the studio.
• To prepare a colour formula that will behave predictably on the day.
• To keep a patch test record before a lightening service.
• To process a payment and issue a receipt.
• To keep the studio safe, clean and properly staffed.
• To meet accounting, tax and record keeping duties that apply to a business in the United States.
• To answer a complaint or resolve a dispute about a service.
• To improve the website so that pages load quickly and forms work on small screens.
• To send a reminder about an upcoming appointment, when the guest has asked for reminders.

We do not use appointment information to build advertising profiles, and we do not sell personal information to anyone. The studio is small, the shelf is visible from the chair, and the records are kept for the reasons written above and for no other reason.

6. Our lawful bases

Where the law of a visitor requires a lawful basis for processing, the studio relies on one of the following. Performance of a contract covers the steps needed to provide a booked service, such as confirming a time, preparing a formula and taking payment. Consent covers optional notes, reminders and any message that a guest volunteers. Legitimate interests cover security of the website, protection of the premises and the ordinary running of a small studio, balanced against the rights of the guest. Legal obligation covers records that a business must keep for tax and accounting.

A guest can withdraw consent at any time by writing to projects@bzhairbeauty.autos. Withdrawal does not affect services already provided, and it does not remove records that a business is required by law to keep.

7. Cookies and local storage

The public website is built to work without advertising cookies. It does not set a tracking cookie for a third party advertising network, and it does not use a pixel that reports a visit to a social platform.

The hosting provider may set a short lived security cookie to distinguish a normal request from an automated attack. That cookie carries a random identifier, expires quickly and is not used to recognise a returning visitor across sessions.

The site may use local storage in the browser for a single purpose: remembering that the visitor has already dismissed a small notice, so the notice does not appear twice. That value stays in the browser, is not sent to the studio and can be cleared at any time through the browser settings.

If you prefer to block cookies entirely, the public pages will continue to load and the contact form will continue to work, because the form hands the message to your own mail application rather than relying on a server session.

8. When we share information

We share information only in the narrow situations listed below. In every case the recipient receives the minimum needed to carry out the task, and no recipient is permitted to use the information for its own marketing.

• With the stylist who is assigned to the appointment, so that the service can be prepared.
• With the payment processor, to complete a payment and issue a receipt.
• With the hosting provider, so that the website remains available and secure.
• With a bookkeeping service, for accounting and tax records only.
• With a professional adviser such as an accountant or lawyer, when advice is required.
• With a public authority, when a valid legal request requires disclosure.
• With a successor business, if the studio is sold or merged, and only after the same protections are confirmed in writing.

We do not share information with advertising networks, data brokers, social platforms or any other party that would use it to contact you about an unrelated product.

9. Service providers

The studio works with a small number of providers. A hosting provider keeps the website online and stores standard request logs. A payment processor handles card payments and returns only a record number and the last four digits of a card for reconciliation. An email provider receives messages sent to the studio address and keeps them in a mailbox controlled by the company.

Each provider is bound by a written agreement that limits its use of the information to the service it performs. If a provider is replaced, the new provider must accept the same limits before any records are transferred. We review these arrangements once a year, usually in January, when the studio closes for restocking.

Where a provider stores information outside the United States, the transfer is protected by the standard contractual terms offered by that provider, and the studio keeps a copy of those terms on file.

10. How long we keep information

We keep contact messages for twenty four months after the last reply, so that a follow up question can be answered in context. Appointment records and service notes are kept for four years, because a colour history becomes more useful with age and because a dispute can arise long after a visit.

Payment and tax records are kept for seven years, which is the period commonly required for business records in the United States. Website request logs are kept by the hosting provider for thirty days and then deleted on a rolling basis.

When a retention period ends, the record is deleted or securely destroyed. Paper cards are shredded at the studio, and digital records are removed from the studio system and from any backup within the next backup cycle.

11. How we protect information

The studio keeps paper cards in a locked drawer at the shelf and limits access to the staff who provide services. Digital records are held in accounts protected by long passwords and a second factor, and access is removed on the day a member of staff leaves.

The website is served over an encrypted connection, and the contact form does not transmit a message to a studio database; instead it prepares the message in your own mail application, which means the message travels through the mail provider that you already use. This design keeps the website simple and reduces the number of places where a message could be stored.

No system is perfect. If a security incident affects personal information, the studio will investigate promptly, take steps to contain the incident, notify affected guests without undue delay, and report to the appropriate authority where the law requires a report.

Please do not send sensitive health information through the public contact form. If a scalp condition or an allergy needs to be discussed, mention it briefly in the message and the studio will arrange a private conversation.

12. Your privacy rights

Subject to the law that applies where you live, you may have the right to be informed about how information is used, to ask for a copy of the information held about you, to ask for a correction, to ask for deletion, to ask for a restriction on use, to object to a particular use, and to ask for information in a portable format.

You also have the right not to be discriminated against for exercising a privacy right. The studio will not refuse a service, charge a different price or provide a lower quality of service because a guest has asked to see a record or has asked for a correction.

To exercise any of these rights, write to projects@bzhairbeauty.autos with the subject Privacy Request. Include enough detail for the studio to identify the record, such as the name used at booking and the approximate date of the last visit. We may ask one clarifying question to confirm identity, and we will not ask for more than is necessary.

13. Access and correction

A request for access is answered within thirty days in most cases, and always within the period required by applicable law. The response describes the categories of information held, the purposes of use, the recipients of the information and the retention period, and it includes a copy of the record itself where that is practical.

If a record is wrong, tell the studio and it will be corrected. For a service record, the correction is noted on the card with the date rather than overwriting the original note, because the original timing can be important when a future colour is planned. If a correction cannot be made, the studio will explain why and record that a correction was requested.

There is no fee for a first access or correction request. A reasonable fee may apply to a repeated request that requires substantial work, and the studio will explain the fee before any work begins.

14. Deletion requests

A guest may ask for personal information to be deleted. The studio will comply unless the information must be kept for a legal obligation, such as a tax record, or unless it is needed to establish, exercise or defend a legal claim.

When a deletion request is granted, contact details are removed from the booking system, service notes are destroyed and any remaining reference in a backup is removed within the next backup cycle. A short record of the request itself is kept so that the studio can show it acted on the request.

Deleting a colour history means that a future visit will start from a fresh consultation and a fresh patch test. The studio will say so plainly at the time of the request, so that the consequence is understood before the record is removed.

15. Privacy for Children

The website is intended for adults. We do not knowingly collect personal information from a child under thirteen. If a parent or guardian believes that a child has sent information through the contact form, write to projects@bzhairbeauty.autos and the message will be deleted from the studio mailbox without delay.

A young guest may be booked for a service by a parent or guardian, and in that case the adult provides the contact details and consents to the service record. The record belongs to the adult who booked, and the same access and deletion rights apply to that adult.

The studio does not run contests, games or interactive features for children, and it does not send marketing messages to anyone under eighteen.

16. Marketing and messages

The studio sends appointment reminders and, occasionally, a short note about a seasonal treatment calendar. A reminder is sent only when a guest has asked for one, and a seasonal note is sent only to guests who have opted in.

Every marketing message includes a way to stop future messages. A request to stop is acted on promptly and is kept on a suppression list so that the same address is not contacted again by mistake. Transactional messages, such as a confirmation of a booked time or a reply to a question, are not marketing and continue as long as they are needed to provide the service.

We do not sell, rent or trade a contact list. The list is held by the studio, is used for studio business only and is reviewed each year to remove anyone who has asked to be left out.

17. Links to other websites

Some pages may link to a map service, a payment page or a professional body. Those websites are operated by other organisations under their own privacy notices. The studio does not control what those organisations collect, and a link on this site is not an endorsement of their practices.

When you follow a link, read the notice on the destination site before providing information. If a link appears broken or points somewhere unexpected, tell the studio at projects@bzhairbeauty.autos so that it can be fixed.

18. International visitors

The studio is located in the United States, and records are kept in the United States. If you visit the website from another country, the information you send will be processed in the United States, where privacy law may differ from the law of your home country.

Where a transfer from another region requires additional protection, the studio relies on the standard contractual terms described in section nine. A visitor who has a question about a transfer can write to projects@bzhairbeauty.autos and the studio will explain which provider receives the information and where it is stored.

Nothing in this section limits a right that the law of your home country gives you, and nothing in this policy asks you to give up a right that cannot be waived by agreement.

19. California privacy notice

If you are a California resident, the following summary applies in addition to the rest of this policy. In the twelve months before the effective date, the studio has collected the categories described in section three: identifiers such as name and email address, commercial information such as a service history, payment information, internet activity from the website logs, and preferences volunteered by a guest.

The studio has not sold personal information, has not shared personal information for cross context behavioural advertising, and has not used sensitive personal information for any purpose beyond providing the service. The categories are collected from the sources listed in section four and are used for the purposes listed in section five.

A California resident may request to know, request to delete, request to correct and request to opt out of sale or sharing. Because the studio does not sell or share information for advertising, an opt out request will be recorded and confirmed even though no sale is taking place. Requests may be sent to projects@bzhairbeauty.autos or made by telephone on +16802679586. An authorised agent may act on behalf of a resident when written authorisation is provided.

The studio will verify a request using the details already on file, will respond within forty five days, and will extend that period once by a further forty five days when more time is needed, with a written explanation.

20. Changes to this policy

This policy is reviewed once a year and whenever a practice changes. When a material change is made, the effective date at the top of the page is updated and a short notice appears on the homepage for at least thirty days.

If a change would expand the use of information already collected, the studio will contact affected guests directly before the new use begins and will offer a way to object. A minor change, such as a corrected typographical error or a new provider with the same role, does not require a notice but is still recorded in the change log.

A copy of the previous version can be requested at projects@bzhairbeauty.autos. The studio keeps earlier versions for three years so that a guest can compare what changed.

21. How to contact us

Questions, requests and complaints about privacy should be sent to the studio. The company details are below and are repeated on every page of this website.

If a complaint cannot be resolved directly, a guest may contact the consumer protection authority in the state where the guest lives. The studio will cooperate with any such process and will keep a record of the complaint and the resolution.

Thank you for reading this policy. The studio would rather answer a question before a visit than correct a misunderstanding after one, so please write or call if anything here is unclear.