Privacy Policy
We care about your privacy. This notice explains what we collect, how we use it, who we share it with, and the choices you have. By using our website, booking, or visiting our salon, you agree to this Policy.
1) What we collect
Information you provide directly
Contact & booking details: name, email, phone number, preferred appointment time, service selections, notes (e.g., design preferences).
Payment details: processed securely by our payment processor (we don’t store full card numbers).
Messages & forms: inquiries, feedback, consultation notes.
Marketing preferences: newsletter opt-in/opt-out, SMS consent.
Reviews, UGC & social: testimonials, photos you share or allow us to post.
Information collected automatically
Device & usage: IP address, browser type, pages viewed, links clicked, approximate location, timestamps.
Cookies & similar tech: to keep the site working, remember preferences, measure performance, and personalize marketing.
Information from third parties
Booking & payments: Square/Square Appointments (or your chosen system).
Website & analytics: Squarespace, Google Analytics.
Social & maps: Instagram/TikTok/Facebook embeds, Google Maps.
Email marketing: [e.g., Mailchimp/Klaviyo] if used.
2) How we use your information
Provide services: schedule appointments, process payments, deliver confirmations and reminders, manage client profiles.
Operate the website: maintain security, fix bugs, measure performance, improve UX.
Customer support: respond to questions, resolve issues.
Marketing (with your consent where required): newsletters, special offers (e.g., Jelly Spa), service updates, ad performance.
Legal & safety: comply with law, enforce policies, prevent fraud or misuse.
3) Legal bases (where applicable)
Contract: to provide the services you request.
Legitimate interests: secure, useful, and improved services; limited, proportionate marketing.
Consent: email/SMS marketing, certain cookies/analytics (where required).
Legal obligation: tax, accounting, compliance.
4) Sharing your information
We do not sell your personal information. We share it only with:
Service providers / processors:
Squarespace (website hosting).
Square / Square Appointments (booking & payments).
Google (Analytics, Maps).
Email/SMS provider ([Mailchimp/Klaviyo], [Twilio], etc.).
Social platforms (if you interact with embeds or our pages).
Professional advisors (legal, accounting), and authorities if required by law.
Business changes: if we undergo a reorganization, your info may transfer in line with this Policy.
These partners may process data in the U.S. or other countries. We require appropriate safeguards where applicable.
5) Retention
We keep personal information only as long as needed for the purposes in this Policy, including legal, tax, and accounting requirements. When no longer needed, we delete or de-identify it.
6) Your choices
Email marketing: use the unsubscribe link in any email or contact us.
SMS: reply STOP to opt out.
Cookies/analytics: adjust your browser settings; use our cookie banner controls (where available).
Account/booking details: request correction or deletion via [hello@thirteenbeautybar.com].
7) Your privacy rights (U.S.)
Depending on where you live (including Texas TDPSA, California CPRA, Colorado CPA, Virginia VCDPA, Connecticut, Utah), you may have rights to:
Know/Access the categories and specific pieces of personal information we hold.
Correct inaccurate information.
Delete information, with certain exceptions.
Opt out of targeted advertising, selling, or sharing of personal information (we do not sell PI; limited advertising/analytics may be considered “sharing” or “targeted advertising” in some states—see Cookie/Ads section).
Data portability in a readily usable format.
Appeal a decision if we deny your request (where required).
How to exercise rights: Email us at [hello@thirteenbeautybar.com] with “Privacy Request” and your state of residence. We’ll verify your identity before responding. You may use an authorized agent as permitted by law.
Do Not Sell/Share (CA/CO/CT/VA/UT): If we ever engage in activities considered “selling” or “sharing” personal information, we will provide a Do Not Sell/Share My Personal Information link. Currently, we do not sell personal information.
8) Cookies, analytics & ads
Necessary cookies keep the site functioning (security, load balancing, bookings).
Performance & analytics (e.g., Google Analytics) help us understand traffic and improve the site.
Functional cookies remember preferences.
Advertising/retargeting (if enabled) may use third-party pixels to show relevant ads.
You can manage cookies via your browser and (where offered) our cookie banner settings. Blocking some cookies may impact site features.
Do Not Track: We do not currently respond to “Do Not Track” signals.
9) Children
Our services are intended for clients 13+. We do not knowingly collect personal information from children under 13. If you believe a child under 13 provided information, contact us to remove it.
10) Security
We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is 100% secure. Please use strong, unique passwords and keep your booking/account details safe.
11) Third-party links & embeds
Our site may include links to third-party websites or embeds (e.g., Instagram, TikTok, Google Maps). Their privacy practices are governed by their own policies.
12) International users
We operate in the United States. If you access the site from outside the U.S., you consent to processing in the U.S., which may have different data protection laws than your country.
13) Changes to this Policy
We may update this Policy to reflect changes to our practices or for legal reasons. We’ll revise the “Last Updated” date and, where required, provide additional notice.
14) Contact us
Questions or requests?
Thirteen Beauty Bar
6215 Via La Cantera, Suite 117, San Antonio, TX 78256
(210) 909-4929 • abarca@thirteenbeautybar.com