Privacy Policy

Contents

• 1. Who this policy covers
• 2. Information collected
• 3. Where the information comes from
• 4. How the information is used
• 5. Cookies and similar technologies
• 6. Analytics, advertising, and your choice
• 7. Who the information is shared with
• 8. Service providers used
• 9. How long information is kept
• 10. Your choices and requests
• 11. California notices
• 12. Children
• 13. Security
• 14. Accessibility
• 15. Changes to this policy
• 16. How to reach us

1. Who this policy covers

This policy applies to shynebychelle.com, to the booking calendar embedded on it, and to messages you send the studio by email, text, or social media. It applies to visitors who browse without booking and to clients who book, pay a deposit, and receive a service.

The studio is a sole proprietorship. There is no parent company, no corporate affiliate, and no group of businesses sharing this information among themselves.

Booking and payment happen on Schedulista, a third-party platform, whether you open it directly or through the calendar embedded here. Schedulista and its payment processor handle that information under their own privacy policies as well as this one.

2. Information collected

Booking and contact information. When you book, Schedulista collects your name, phone number, and email address. Michelle receives that information along with your appointment details so she can provide your service.

Payment information. If you pay a deposit, Schedulista’s payment processor, Stripe, collects your card details to process it. This site never receives, handles, or stores your card number.

Health information you share. The booking form and the studio intake ask about allergies, sensitivities, skin conditions, and past reactions to nail products. This is asked so a service can be performed safely, or declined where it cannot be. It is used for that purpose alone. It is never used for advertising, never shared with an advertising platform, and never sold. You can ask for it to be deleted at any time.

Preferences you give. Inspiration images, design notes, a quiet-appointment preference, how you heard about the studio, and similar answers you choose to provide.

Booking source. The website keeps a random booking reference in your browser session and fills it into the Booking reference field of the embedded calendar’s booking form, where you can see it. Schedulista saves that field with your booking. As you move through the embedded calendar, the site sends that reference to the studio with the name of each booking step, such as choosing a time or reviewing the summary, and the time of the step. When the calendar reports a booking, the site also sends its appointment ID with the same reference. The studio connects your booking to your visit through the reference in the booking record it receives from Schedulista and otherwise through the appointment ID, or by the booking’s steps or, failing that, by its timing. The studio uses the match to connect your reservation to a website source, such as Instagram, Pinterest or Google, and the first public page you visited. Only source categories, the name of one of the studio’s own link campaigns (such as the Pinterest board a pin came from), public page paths and booking step names are saved; full referring URLs and query strings are omitted. The site also sends your advertising choice, and when you made it, with the reference, and again if you change it later in the visit. If you accepted advertising, it adds the Meta cookie identifiers described in section 5 and the random identifier of the visit that the Pinterest tag also receives, and the studio’s server records the IP address and browser details of that visit, for the booking confirmation described in section 6. If you accepted Google Analytics, the site also sends, with the reference, the two identifiers Google’s tag set in your browser (a client ID and a session ID), and the studio’s server reports a confirmed booking to Google Analytics with the menu price of the service booked, so the visit that led to it is credited (section 6). The form also asks an optional question about how you found the studio. Your answer is kept separately from the website source.

Image delivery. Sanity hosts website content and delivers some images. When your browser requests those images, Sanity receives your IP address and standard browser and request information to deliver and secure them.

Site usage. Pages viewed, the page that referred you, approximate location derived from your IP address, and general device and browser information. What is collected here depends on the analytics and advertising choices described in section 6, apart from the first-party visit count described in section 5.

Messages you send. If you reach out by email, text, or social media, the content of that conversation is kept so it can be answered and referred back to.

Photographs. Photographs of completed work may be taken for portfolio and promotional use. Tell the studio before or during your appointment if you would prefer that photographs of your hands are not taken or published.

3. Where the information comes from

Nearly all of it comes from you: what you type into the booking form, what you tell Michelle at your appointment, and what you send in a message. The rest is collected automatically by the website and the analytics tools described in sections 5 and 6, or is received from Schedulista and Stripe when you complete a booking. No personal information about you is bought from data brokers or appended from outside lists.

4. How the information is used

Information collected through this site and the booking flow is used to:

• schedule, confirm, and provide your appointment
• take and apply deposits, and process the balance of a service
• send appointment confirmations, reminders, and changes
• answer questions and respond to messages
• perform services safely, which is the only use of the health information in section 2
• understand how the site is used and improve it, including how many visits come before a booking (the first-party visit count in section 5)
• report confirmed bookings, with the menu price of the service, to Google Analytics, only where you have accepted analytics (section 6)
• measure the studio’s Facebook and Instagram ads, including whether a visit led to a booking, and show ads to people who visited the site, only where you have accepted advertising cookies (section 6)
• keep the site and the booking process secure and working
• maintain business, tax, and other records required by law
• establish or defend a legal claim where that becomes necessary

Information is not used for any materially different purpose without updating this policy first, and without obtaining consent where the law requires it.

5. Cookies and similar technologies

Cookies are small files a site stores in your browser. Related technologies include pixels, tags, software development kits, local storage, and device identifiers. Their uses on this site are described below.

Strictly necessary. A small amount of browser storage records your cookie choices so you are not asked again, and the studio’s private arrival page uses a cookie to remember that you entered its password. These are required for those features to work and are not used for tracking.

First-party booking reference. Temporary browser-session storage keeps the same reference while you choose a service or change booking options; a booking link you open in a new tab or window copies it into that tab, where it ends when you close that tab. This measurement works independently of the Google Analytics choice. The reference and its source are processed by the studio's private booking system and Schedulista. They are kept out of Google Analytics and Plausible events. Unless you accept analytics or advertising, the link uses no advertising cookie or Google identifier. If you accepted advertising, the Meta cookie identifiers and the visit’s Pinterest identifier travel with the reference for the booking confirmations described in section 6. If you accepted Google Analytics, the Google Analytics client and session identifiers travel with it for the booking report described in section 6; the page reads them from Google’s tag each time and never stores them. The references of those visits, with the times at which each choice and Meta cookie reported for them was made (never the identifiers themselves), are kept in this browser’s local storage for nine days, so that withdrawing on a later visit, or in another tab, still reaches them.

First-party visit count. The site’s own server sets one cookie, sbc_vid, holding a random identifier, and keeps it for 395 days. With it the studio records which public pages of this site were viewed and when, the source category of each visit (such as Instagram, Google, or a direct visit), and the kind of browser (a phone, a computer, or an app’s own browser such as Instagram’s), so it can see how many visits come before a booking. The identifier is connected to the booking reference of a visit in which you book. It holds no name or contact detail, is never connected to your client record, is kept by the studio, and is shared with nobody. It does not run, and an existing one is deleted, if you choose Reject all in the cookie notice, save it with both options off, or your browser sends a Global Privacy Control signal; Reject all or that save leaves a small cookie, sbc_opt, that keeps it off. The visit records are cleared from the studio’s visit log 13 months after the visit.

Analytics. Google Analytics 4 sets first-party analytics cookies, and only after you accept it. Google Tag Manager, which loads it, sets none of its own. Plausible Analytics sets none at all. See section 6.

Advertising. The Meta Pixel sets first-party cookies (_fbp, and _fbc when you arrive from a Meta ad), and only after you accept advertising. Meta sets them to last about 90 days. Declining or withdrawing removes them from this site. If you accepted advertising, the booking page reads these two values, or the Meta click identifier in its own address when you arrive there from a Meta link, for the booking confirmation; it sets no cookie of its own. The Pinterest tag sets first-party cookies (_pin_unauth, and _derived_epik when Pinterest sends one) and keeps copies in this browser’s local storage, only after you accept advertising, for up to a year. Declining or withdrawing removes them from this site. The site keeps a random identifier for each visit in this browser’s session storage, which ends when you close the tab, and in the copy a booking link opened in a new tab takes, which ends with that tab. If you accepted advertising, the Pinterest tag receives it when you tap a link into the booking calendar, only when the booking page will hold the same identifier; otherwise the tag receives nothing for that tap. See section 6.

The embedded booking calendar may set cookies necessary for booking to work, and loads its own analytics inside its frame. Those are set by Schedulista in its own domain, under its own privacy policy, and are outside this site’s control.

6. Analytics, advertising, and your choice

Plausible Analytics runs on every page. It is a privacy-focused, cookieless tool that Michelle hosts herself. It sets no cookies, stores no identifying IP address, creates no profile, and does not follow you across other websites. It reports aggregate traffic only, so there is nothing to opt out of.

Google Analytics 4 loads only if you accept it. It does not run, set a cookie, or send any request until you choose Accept in the analytics notice. Choosing Decline keeps it off on this visit and on later ones. You can change your choice at any time using the “cookie choices” link in the footer of every page. If you accept, it collects the site-usage information described in section 2. Google’s practices are described at policies.google.com/privacy. Google Signals and advertising personalization are switched off in this site’s analytics account. On the booking page it runs under the same choice, and it never reads anything inside the Schedulista booking frame.

Bookings are reported to Google Analytics only if you accepted it. When you book in a visit where you had already accepted Google Analytics, the studio’s own server reports the booking to Google Analytics, under the client and session identifiers Google’s tag set in your browser, so the visit that led to it is credited. The report contains the service booked, its menu price (the starting price of the service plus any soak-off or squeeze-in), and when the booking was made. It contains no name, email, phone number, note, or intake answer. It is sent only when the booking is connected to your visit through the booking reference or the booking steps described in section 2, never for a booking connected by its timing alone or made by phone, by message, or directly on Schedulista. Declining, withdrawing before the report is sent, or a Global Privacy Control signal stops it. A cancellation is reported under the same conditions, with the same menu price.

Google Tag Manager is the container the studio uses to load the tags above. It runs under the same choice: nothing fetches it until you accept, a decline or a Global Privacy Control signal keeps it out of the page entirely, and withdrawing consent stops it. It sets no cookies of its own and collects nothing beyond the device, browser, and IP address that every web request includes. The commitments below limit what it may load, so no advertising tag reaches it before this policy names that tag.

The Meta Pixel loads only if you accept advertising. Meta Platforms provides it to advertisers on Facebook and Instagram. It does not run, set a cookie, or send any request until you choose Accept all, or tick Advertising and save, in the cookie notice. If you accept, it tells Meta which pages of this site you viewed and when you tap a link into the booking calendar, along with your IP address, device and browser details, and the Meta cookie identifiers described in section 5. Meta may connect that activity to a Facebook or Instagram account you are signed in to. The studio uses it to measure its ads and to show ads to people who have visited the site. The pixel never runs on the booking calendar page or the booking confirmation page, it is not given your name, email, or phone number, and it does not read anything inside the Schedulista booking frame. Withdrawing through the “cookie choices” link stops it on the page you are on and keeps it off afterwards. Meta’s practices are described at facebook.com/privacy/policy.

The Pinterest tag loads only if you accept advertising. Pinterest provides it to businesses that post pins and run ads on Pinterest. It loads on the same terms as the Meta Pixel: nothing runs, is set, or is sent until you choose Accept all, or tick Advertising and save. If you accept, it tells Pinterest which pages of this site you viewed and when you tap a link into the booking calendar, with the visit’s random identifier described in section 5, along with your IP address, device and browser details, and the Pinterest cookie identifiers described in section 5. Pinterest may connect that activity to a Pinterest account you are signed in to. The studio uses it to measure its pins and ads and to show them to people who have visited the site. The tag never runs on the booking calendar page or the booking confirmation page, it is not given your name, email, or phone number, its automatic reading of form fields is switched off, the page addresses it receives keep only the studio’s own link tags and only values from the studio’s fixed lists, the site you came from is named only when it is this site or a platform such as Pinterest or Instagram, a Pinterest click identifier in the page address is removed before the tag loads, so the tag never stores it, and it does not read anything inside the Schedulista booking frame. Withdrawing through the “cookie choices” link stops it on the page you are on and keeps it off afterwards. Pinterest’s practices are described at policy.pinterest.com/privacy-policy.

Booking confirmations go to Meta only if you accepted advertising. When you book in a visit where you had already accepted advertising, the studio’s own server tells Meta, through Meta’s Conversions API, that a booking was made and when. The confirmation contains your email address, phone number, and first and last name in hashed form (scrambled by a one-way function before it leaves the studio, so Meta can only compare it with the same scrambling of details it already holds), the Meta cookie identifiers described in section 5, and the IP address and browser details of your visit. It contains no service, price, deposit, intake answer, or note. Meta uses it to measure whether the studio’s ads led to bookings and to improve how those ads are shown, and may connect it to a Facebook or Instagram account. It is sent only when the studio’s own booking record from Schedulista holds the reference of the visit in which you booked, which the site fills into the booking form’s Booking reference field, and no other booking’s record holds that reference or is linked to it by the calendar’s report. A booking whose Booking reference was cleared or changed, or names a visit whose reference had expired when the booking was made, is never sent. Nor is a booking connected to a visit only by the calendar’s report to the site, by its booking steps or by its timing, or made by phone, by message, or directly on Schedulista. It counts only an advertising choice made on the cookie bar that names this confirmation; a choice made before the bar named it covers the Meta Pixel alone. If you decline advertising, or your browser sends a Global Privacy Control signal, no confirmation is sent and none of those identifiers, IP address, or browser details reach the studio’s server for it. Withdrawing on any page of the site, before you book or while a confirmation still waits to be sent, stops it; if the studio’s server cannot be reached at that moment, your browser keeps trying while the page is open and again on your next visit, and if you accept advertising again in the meantime, your browser sends that acceptance only after the withdrawal has arrived. A booking canceled before it is sent is never sent, and a cancellation sends nothing further.

Booking confirmations go to Pinterest on the same terms. For a booking that qualifies for the confirmation to Meta above, the studio’s own server also tells Pinterest, through Pinterest’s Conversions API, that a booking was made and when. That confirmation contains your email address and phone number in hashed form, the visit’s random identifier described in section 5 (so Pinterest counts the tap and the booking as one visit), and the IP address and browser details of your visit. It contains no name, service, price, deposit, intake answer, or note. Pinterest uses it to measure whether the studio’s pins and ads led to bookings and to improve how they are shown, and may connect it to a Pinterest account. Every condition above applies to it, withdrawal included, and it counts only an advertising choice made on the cookie bar that names Pinterest; the bar asks again anyone who chose before it named Pinterest.

Global Privacy Control. If your browser sends a Global Privacy Control signal, it is treated as a decline. Neither Google Analytics, the Meta Pixel nor the Pinterest tag is loaded, no booking confirmation is sent to Meta or Pinterest, no booking is reported to Google Analytics, the first-party visit count is off, and you are not asked again. This site does not respond separately to Do Not Track, which the choices above already cover.

Other advertising technologies. The Meta Pixel, the Pinterest tag and the booking confirmations above are the only advertising technologies on this site. Contact information reaches an advertising platform only in those confirmations, in hashed form, for a booking made in a visit that accepted advertising. The studio may add others in future, for example a search advertising tag, or reaching or excluding existing clients. Three commitments apply to anything of that kind, to the Meta Pixel, to the Pinterest tag, and to the booking confirmations:

• this policy is updated to name the technology, the platform, the information involved, and the purpose, before that technology is switched on
• the technology is placed behind the same consent choice described above, so it does not load, set a cookie, or send a request unless you have accepted, and a Global Privacy Control signal continues to count as a decline
• the health information described in section 2, the contents of your messages, appointment notes, service details, photographs, and payment details are never used for advertising or sent to an advertising platform

Michelle does not sell personal information for money. Some privacy laws use terms such as “targeted advertising” or “sharing” for advertising activity even where no money changes hands, which is why the commitments above are stated in advance.

7. Who the information is shared with

Booking and payment information is shared with Schedulista and Stripe, which process it under their own privacy policies. Site-usage information, and the booking report described in section 6, are processed by Google Analytics only where you have accepted it, and by Plausible, which Michelle hosts and which reports aggregate traffic without advertising cookies. Where you have accepted advertising, the site activity described in section 6, and the hashed confirmation of a booking made in that visit, are shared with Meta Platforms and Pinterest for advertising. The first-party visit count described in section 5 is kept by the studio and shared with nobody.

Beyond those service providers, information may be disclosed where the law requires it, in response to lawful legal process, to establish or defend a legal claim, to protect the safety of a person, or to a professional adviser such as an accountant or attorney under a duty of confidence. If the business were ever sold or transferred, client records could transfer with it, and this policy would continue to apply until you were told otherwise.

Health information you share is not disclosed for advertising to anyone, in any circumstance. Michelle does not sell personal information for money.

8. Service providers used

Most of these providers operate in the United States. Sanity also processes information outside the United States, including through the global network that delivers its images. Each provider processes information under its own privacy policy and its agreement with the studio.

9. How long information is kept

Client and appointment records are kept for as long as reasonably needed to provide services, manage the client relationship, maintain business and tax records, comply with legal duties, and resolve disputes. Health information you share is kept only as long as needed to serve you safely and to meet those record-keeping duties, and is deleted on request. Analytics information is retained according to the settings of the tool that collected it. The IP address, browser details, Meta cookie identifiers, the visit’s Pinterest identifier, and Google Analytics identifiers kept for a booking confirmation or a booking report are cleared from the studio’s booking system eight days after the visit, and from its backups within the two weeks after that. The first-party visit count’s records are cleared from the visit log 13 months after the visit. Schedulista, Stripe, Google, Meta, and Pinterest retain information according to their own policies and service terms.

10. Your choices and requests

Analytics and advertising. Accept or decline in the cookie notice, and change either choice at any time through the “cookie choices” link in the footer. Sending a Global Privacy Control signal from your browser is treated as a decline of both. Reject all, a save with both options off, or a Global Privacy Control signal, also turns off the first-party visit count described in section 5.

Access, correction, and deletion. To see what is held about you, correct it, or ask for it to be deleted, email shynebychelle@gmail.com. Booking and payment records live with Schedulista and Stripe, so a request that needs their action is coordinated with them. Some information has to be kept to meet tax and record-keeping duties, and where that applies you will be told.

Appointment messages. Confirmations and reminders are part of providing your appointment. Ask the studio directly to change how you are contacted.

Photographs. Ask at any time for a photograph of your work not to be taken, or to be removed from the site or social media.

Exercising any of these choices does not affect the service you receive.

11. California notices

This policy is provided under the California Online Privacy Protection Act, which requires a commercial website collecting personal information from California residents to post one and to describe the categories collected, the categories of third parties it is shared with, the process for reviewing and requesting changes, how policy changes are communicated, and the effective date. Those are covered in sections 2, 7, 10, 15, and at the top of this page.

The studio is a sole proprietorship whose size places it below the thresholds that make a business subject to the California Consumer Privacy Act. It therefore does not operate the formal request and verification machinery that Act requires. The practical choices in section 10 are offered regardless, and requests sent to the address below are honored.

Michelle does not sell personal information for money. The Meta Pixel, the Pinterest tag and the booking confirmations described in section 6 share site activity, and for a booking made in that visit its hashed confirmation, with Meta and Pinterest for advertising, which some privacy laws call sharing for cross-context behavioral advertising. It happens only if you accept advertising cookies, and declining, withdrawing, or a Global Privacy Control signal prevents it.

12. Children

This site and these services are directed to adults. Booking is for clients aged 18 and over, and a client under 18 may be served only with a parent or legal guardian present who completes and signs the intake on their behalf. No information is knowingly collected from children under 13. If you believe a child has provided information here, email the address below and it will be deleted.

13. Security

The site is served over an encrypted connection. Payment details are handled by Stripe and never reach this site. Booking records are held in Schedulista behind an account password. The private arrival page, which holds the studio address, sits behind its own password and is excluded from search engines. No method of transmission or storage is completely secure, and no absolute guarantee of security can honestly be given.

14. Accessibility

This site is built toward the Web Content Accessibility Guidelines version 2.1 at level AA. Images carry text descriptions, pages are navigable by keyboard, and the color palette is checked for contrast. That is a target being worked toward rather than a claim of complete conformance. If any part of this site is hard for you to use, or you need information here in another format, email shynebychelle@gmail.com and it will be provided another way.

15. Changes to this policy

This policy may be updated as the site, the tools it uses, or the law changes. The effective date at the top shows when the current version took effect, and material changes are identified on this page. Where a change would apply a materially new use to information already collected, additional notice is given first, and consent is obtained where the law requires it. As stated in section 6, any advertising technology is disclosed here before it is switched on.

16. How to reach us

Questions about this policy, or any request described in section 10, can be sent toshynebychelle@gmail.com. Please say what you are asking for so it can be answered properly.