Privacy Policy

Contents

• 1. Who this policy covers
• 2. Information collected
• 3. Where the information comes from
• 4. How the information is used
• 5. Cookies and similar technologies
• 6. Analytics, advertising, and your choice
• 7. Who the information is shared with
• 8. Service providers used
• 9. How long information is kept
• 10. Your choices and requests
• 11. California notices
• 12. Children
• 13. Security
• 14. Accessibility
• 15. Changes to this policy
• 16. How to reach us

1. Who this policy covers

This policy applies to shynebychelle.com, to the booking calendar embedded on it, and to messages you send the studio by email, text, or social media. It applies to visitors who browse without booking and to clients who book, pay a deposit, and receive a service.

The studio is a sole proprietorship. There is no parent company, no corporate affiliate, and no group of businesses sharing this information among themselves.

Booking and payment happen on Schedulista, a third-party platform, whether you open it directly or through the calendar embedded here. Schedulista and its payment processor handle that information under their own privacy policies as well as this one.

2. Information collected

Booking and contact information. When you book, Schedulista collects your name, phone number, and email address. Michelle receives that information along with your appointment details so she can provide your service.

Payment information. If you pay a deposit, Schedulista’s payment processor, Stripe, collects your card details to process it. This site never receives, handles, or stores your card number.

Health information you share. The booking form and the studio intake ask about allergies, sensitivities, skin conditions, and past reactions to nail products. This is asked so a service can be performed safely, or declined where it cannot be. It is used for that purpose alone. It is never used for advertising, never shared with an advertising platform, and never sold. You can ask for it to be deleted at any time.

Preferences you give. Inspiration images, design notes, a quiet-appointment preference, how you heard about the studio, and similar answers you choose to provide.

Site usage. Pages viewed, the page that referred you, approximate location derived from your IP address, and general device and browser information. What is collected here depends on the analytics choice described in section 6.

Messages you send. If you reach out by email, text, or social media, the content of that conversation is kept so it can be answered and referred back to.

Photographs. Photographs of completed work may be taken for portfolio and promotional use. Tell the studio before or during your appointment if you would prefer that photographs of your hands are not taken or published.

3. Where the information comes from

Nearly all of it comes from you: what you type into the booking form, what you tell Michelle at your appointment, and what you send in a message. The rest is collected automatically by the website and the analytics tools described in sections 5 and 6, or is received from Schedulista and Stripe when you complete a booking. No personal information about you is bought from data brokers or appended from outside lists.

4. How the information is used

Information collected through this site and the booking flow is used to:

• schedule, confirm, and provide your appointment
• take and apply deposits, and process the balance of a service
• send appointment confirmations, reminders, and changes
• answer questions and respond to messages
• perform services safely, which is the only use of the health information in section 2
• understand how the site is used and improve it
• keep the site and the booking process secure and working
• maintain business, tax, and other records required by law
• establish or defend a legal claim where that becomes necessary

Information is not used for any materially different purpose without updating this policy first, and without obtaining consent where the law requires it.

5. Cookies and similar technologies

Cookies are small files a site stores in your browser. Related technologies include pixels, tags, software development kits, local storage, and device identifiers. This site uses them in three categories.

Strictly necessary. A small amount of browser storage records your analytics choice so you are not asked again, and the studio’s private arrival page uses a cookie to remember that you entered its password. These are required for those features to work and are not used for tracking.

Analytics. Google Analytics 4 sets first-party analytics cookies, and only after you accept it. Plausible Analytics sets none at all. See section 6.

Advertising. No advertising cookie, pixel, or tag runs on this site today. If that changes, section 6 governs it.

The embedded booking calendar may set cookies necessary for booking to work, and loads its own analytics inside its frame. Those are set by Schedulista in its own domain, under its own privacy policy, and are outside this site’s control.

6. Analytics, advertising, and your choice

Plausible Analytics runs on every page. It is a privacy-focused, cookieless tool that Michelle hosts herself. It sets no cookies, stores no identifying IP address, creates no profile, and does not follow you across other websites. It reports aggregate traffic only, so there is nothing to opt out of.

Google Analytics 4 loads only if you accept it. It does not run, set a cookie, or send any request until you choose Accept in the analytics notice. Choosing Decline keeps it off on this visit and on later ones. You can change your choice at any time using the “cookie choices” link in the footer of every page. If you accept, it collects the site-usage information described in section 2. Google’s practices are described at policies.google.com/privacy. Google Signals and advertising personalization are switched off in this site’s analytics account, and Google Analytics is never loaded on the booking page.

Global Privacy Control. If your browser sends a Global Privacy Control signal, it is treated as a decline. Google Analytics is not loaded and you are not asked again. This site does not respond separately to Do Not Track, which the analytics choice above already covers.

Advertising and future technologies. The studio does not currently run any advertising pixel, tag, or audience-matching tool on this site, and does not currently share site activity or contact information with an advertising platform. It may do so in future, for example a pixel from a social or search advertising platform used to measure advertising, to reach people who have visited the site, or to reach or exclude existing clients. Three commitments apply to anything of that kind:

• this policy is updated to name the technology, the platform, the information involved, and the purpose, before that technology is switched on
• the technology is placed behind the same consent choice described above, so it does not load, set a cookie, or send a request unless you have accepted, and a Global Privacy Control signal continues to count as a decline
• the health information described in section 2, the contents of your messages, appointment notes, service details, photographs, and payment details are never used for advertising or sent to an advertising platform

Michelle does not sell personal information for money. Some privacy laws use terms such as “targeted advertising” or “sharing” for advertising activity even where no money changes hands, which is why the commitments above are stated in advance.

7. Who the information is shared with

Booking and payment information is shared with Schedulista and Stripe, which process it under their own privacy policies. Site-usage information is processed by Google Analytics only where you have accepted it, and by Plausible, which Michelle hosts and which reports aggregate traffic without advertising cookies.

Beyond those service providers, information may be disclosed where the law requires it, in response to lawful legal process, to establish or defend a legal claim, to protect the safety of a person, or to a professional adviser such as an accountant or attorney under a duty of confidence. If the business were ever sold or transferred, client records could transfer with it, and this policy would continue to apply until you were told otherwise.

Health information you share is not disclosed for advertising to anyone, in any circumstance. Michelle does not sell personal information for money.

8. Service providers used

These providers operate in the United States. Each processes information under its own privacy policy and its agreement with the studio.

9. How long information is kept

Client and appointment records are kept for as long as reasonably needed to provide services, manage the client relationship, maintain business and tax records, comply with legal duties, and resolve disputes. Health information you share is kept only as long as needed to serve you safely and to meet those record-keeping duties, and is deleted on request. Analytics information is retained according to the settings of the tool that collected it. Schedulista, Stripe, and Google retain information according to their own policies and service terms.

10. Your choices and requests

Analytics. Accept or decline in the analytics notice, and change that choice at any time through the “cookie choices” link in the footer. Sending a Global Privacy Control signal from your browser is treated as a decline.

Access, correction, and deletion. To see what is held about you, correct it, or ask for it to be deleted, email shynebychelle@gmail.com. Booking and payment records live with Schedulista and Stripe, so a request that needs their action is coordinated with them. Some information has to be kept to meet tax and record-keeping duties, and where that applies you will be told.

Appointment messages. Confirmations and reminders are part of providing your appointment. Ask the studio directly to change how you are contacted.

Photographs. Ask at any time for a photograph of your work not to be taken, or to be removed from the site or social media.

Exercising any of these choices does not affect the service you receive.

11. California notices

This policy is provided under the California Online Privacy Protection Act, which requires a commercial website collecting personal information from California residents to post one and to describe the categories collected, the categories of third parties it is shared with, the process for reviewing and requesting changes, how policy changes are communicated, and the effective date. Those are covered in sections 2, 7, 10, 15, and at the top of this page.

The studio is a sole proprietorship whose size places it below the thresholds that make a business subject to the California Consumer Privacy Act. It therefore does not operate the formal request and verification machinery that Act requires. The practical choices in section 10 are offered regardless, and requests sent to the address below are honored.

Michelle does not sell personal information, and does not share it for cross-context behavioural advertising. If that ever changes, this policy is updated first and the disclosures and choices required at that time are provided.

12. Children

This site and these services are directed to adults. Booking is for clients aged 18 and over, and a client under 18 may be served only with a parent or legal guardian present who completes and signs the intake on their behalf. No information is knowingly collected from children under 13. If you believe a child has provided information here, email the address below and it will be deleted.

13. Security

The site is served over an encrypted connection. Payment details are handled by Stripe and never reach this site. Booking records are held in Schedulista behind an account password. The private arrival page, which holds the studio address, sits behind its own password and is excluded from search engines. No method of transmission or storage is completely secure, and no absolute guarantee of security can honestly be given.

14. Accessibility

This site is built toward the Web Content Accessibility Guidelines version 2.1 at level AA. Images carry text descriptions, pages are navigable by keyboard, and the color palette is checked for contrast. That is a target being worked toward rather than a claim of complete conformance. If any part of this site is hard for you to use, or you need information here in another format, email shynebychelle@gmail.com and it will be provided another way.

15. Changes to this policy

This policy may be updated as the site, the tools it uses, or the law changes. The effective date at the top shows when the current version took effect, and material changes are identified on this page. Where a change would apply a materially new use to information already collected, additional notice is given first, and consent is obtained where the law requires it. As stated in section 6, any advertising technology is disclosed here before it is switched on.

16. How to reach us

Questions about this policy, or any request described in section 10, can be sent toshynebychelle@gmail.com. Please say what you are asking for so it can be answered properly.