Privacy Policy
Lotus Salon by Valerie, LLC
Last Updated: August 21, 2025
Introduction
At Lotus Salon by Valerie, LLC ("Lotus Salon Studio," "we," "us," or "our"), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://lotussalonstudio.com, use our services, or interact with us in person.
By using our website or services, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our website or services.
Information We Collect
Personal Information You Provide
- Name, email address, phone number, and mailing address
- Appointment booking information and service preferences
- Payment information (processed securely through third-party processors)
- Health information relevant to salon services (allergies, skin sensitivities)
- Communications you send to us (emails, messages, feedback)
- Marketing preferences and communication consent
Information Automatically Collected
- IP address, browser type, and device information
- Website usage data, pages visited, and time spent on site
- Cookies and similar tracking technologies
- Location data (general geographic area based on IP)
- Referral source and search terms used to find our website
Third-Party Information
- Information from Hummingbook (our booking platform)
- Social media interactions and profile information (if you connect accounts)
- Review platform information (Google, Yelp, Facebook)
- Marketing platform data for advertising purposes
How We Use Your Information
Service Delivery
- Schedule and manage appointments
- Provide personalized salon services
- Process payments and maintain records
- Send appointment reminders and confirmations
- Maintain client service history
Communication
- Respond to inquiries and customer service requests
- Send promotional offers and newsletters (with consent)
- Notify about service updates or policy changes
- Conduct satisfaction surveys
- Emergency contact if needed during services
Business Operations
- Improve our website and services
- Analyze usage patterns and preferences
- Prevent fraud and ensure security
- Comply with legal obligations
- Maintain business records and accounting
Marketing
- Send targeted advertisements (with consent)
- Create custom marketing campaigns
- Track marketing effectiveness
- Social media advertising and retargeting
- Loyalty program management
Cookies and Tracking Technologies
We use cookies, web beacons, and similar technologies to enhance your experience and gather information about visitors and visits to our website.
Types of Cookies We Use
Essential Cookies
Required for website functionality, security, and basic operations.
Performance Cookies
Help us understand how visitors interact with our website.
Marketing Cookies
Used to deliver relevant advertisements and track campaign effectiveness.
Preference Cookies
Remember your settings and preferences for future visits.
Managing Cookies
You can control cookies through your browser settings. However, disabling certain cookies may limit functionality of our website. Most browsers automatically accept cookies, but you can modify your browser settings to decline cookies.
Third-Party Services
Hummingbook Booking Platform
We use Hummingbook to manage appointments and bookings. Information you provide through the booking system is subject to both our privacy policy and Hummingbook's privacy policy. Hummingbook may collect payment information, appointment details, and communication preferences.
Other Third-Party Services
- Google Analytics: Website analytics and performance tracking
- Facebook Pixel: Social media advertising and analytics
- Instagram Business: Social media integration and marketing
- Email Marketing Platforms: Newsletter and promotional communications
- Payment Processors: Secure payment processing (Square, Stripe, etc.)
- Review Platforms: Google Reviews, Yelp, Facebook Reviews
Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties except as described below:
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL encryption for data transmission
- Secure data storage and backup systems
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
- Incident response procedures
- Vendor security requirements
- Regular software updates and patches
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our security measures.
Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.
Retention Periods
- Client Records: 7 years after last service (for tax and legal compliance)
- Marketing Data: Until you opt-out or 3 years of inactivity
- Website Analytics: 26 months (Google Analytics default)
- Communication Records: 3 years for customer service purposes
- Payment Information: Per payment processor requirements (typically 7 years)
Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
General Rights
- Access to your personal information
- Correction of inaccurate information
- Deletion of your information (with limitations)
- Opt-out of marketing communications
- Data portability (where applicable)
CCPA Rights (California Residents)
- Know what personal information is collected
- Know if information is sold or disclosed
- Opt-out of the sale of personal information
- Access and delete personal information
- Non-discrimination for exercising rights
Important: We do not sell personal information to third parties. We may share information with service providers as described in this policy.
GDPR Compliance (EU Residents)
If you are a resident of the European Union, you have additional rights under the General Data Protection Regulation (GDPR):
Legal Basis for Processing
We process your data based on: contract performance, legitimate business interests, legal compliance, and your consent (for marketing).
Additional GDPR Rights
Right to restrict processing, right to object to processing, right to data portability, and right to withdraw consent at any time.
Data Transfers
When transferring data outside the EU, we ensure appropriate safeguards are in place through standard contractual clauses or adequacy decisions.
Children's Privacy
Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly. For clients under 18, we require parental consent for certain services and communications.
Contact Us About Privacy
If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us:
Lotus Salon by Valerie, LLC
6070 W Behrend Dr. #140 Suite 111
Glendale, AZ 85308
Email: valerie@lotussalonstudio.com
Subject Line: "Privacy Policy Inquiry"
We will respond to privacy-related inquiries within 30 days of receipt. For urgent privacy concerns, please indicate "URGENT" in your subject line.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we may also provide additional notice (such as email notification). Your continued use of our services after any changes constitute your acceptance of the updated Privacy Policy.
This Privacy Policy was last updated on August 21, 2025 and is effective immediately.