Legal

Privacy Policy

Effective date: August 17, 2026 Last updated: August 17, 2026 Version: 1.0

1.Scope

This Privacy Policy explains how we collect, use, disclose, store, protect, and delete information when you visit our website, contact us, request or book a service, buy hair products, enroll in training, or communicate with us by email, phone, text message, Instagram, Facebook, Messenger, WhatsApp, or any automated messaging feature connected to our business.

It applies to information we control for our salon, product, and training services. It does not replace the privacy policies of Meta, WhatsApp, Google, payment processors, or other third-party services you choose to use.

2.Short summary

• We collect what we need to answer your question, run a consultation, book and provide services, sell hair products, take payment, and meet legal obligations.
• If you message us on Instagram, Facebook, or Messenger, we keep only the message information reasonably needed to reply and to manage your request.
• We use ordinary business tools: website hosting, a small database for requests, email notification, Meta messaging, and payment processing. They are named in section 8.
• We do not send marketing text messages. Texts and calls from us are about your own request or appointment.
• We do not sell your personal information for money. We do not currently run analytics or advertising cookies on this site.
• You can ask for access, correction, deletion, or a marketing opt-out at any time: office@andromeda-beauty.com. Deletion has its own page: Data Deletion Instructions.

3.Information we collect

4.How we collect it

• Directly from you — when you fill in our form, call, text, message us, send photos, buy a product or service, or enroll in a course.
• Automatically — standard web server logs, and, if enabled in future, cookies and similar technologies (section 9).
• From Meta platforms — when you message, comment, tag, or click an ad on Instagram, Facebook, or Messenger.
• From our service providers — the tools listed in section 8, which handle hosting, request storage, notification email, and payments on our behalf.
• From referrals and public sources — where permitted by law and relevant to the interaction you started.

5.How we use it

• To answer your inquiry, run consultations, recommend a suitable method, quote a price, and book and provide services.
• To sell and ship hair products within the United States, and to register and run training courses.
• To process payments, deposits, invoices, refunds, and related support requests.
• To send messages about your own request or appointment — confirmations, reminders, changes, and replies. See section 6.
• To keep practical service notes so you do not have to repeat yourself, and to keep the necessary history of work performed.
• To send marketing or promotional messages by email only, where permitted by law or with your consent, and only until you opt out.
• To keep the website working, prevent spam and fraud, maintain security, and protect clients, staff, and property.
• To comply with law, tax and accounting duties, platform requirements, legal process, and dispute resolution.
• To produce aggregated or de-identified internal statistics — for example which services are asked about most often — which are not used to identify you.

6.Texts, calls, and email

When you give us your phone number in our request form or in a message, you are asking us to get back to you. We use it to contact you about that request and about your appointments: to reply, confirm, reschedule, remind you of an appointment, or tell you about something that affects it.

• We do not send marketing or promotional text messages, and we do not sell or rent phone numbers to anyone.
• Message frequency depends on your own request and appointments; there is no recurring campaign.
• Message and data rates may apply, depending on your mobile plan.
• To stop texts, reply STOP at any time, or tell us by phone or email. For help, reply HELP or contact us. Opting out of texts does not cancel an appointment — please confirm changes with us directly.
• Email marketing (news, promotions) is separate and optional. If we start sending it, every message will carry an unsubscribe link, and you can also opt out by writing to us.

7.Instagram, Facebook, chatbot, and AI

If you contact us through Instagram, Facebook, Messenger, or WhatsApp, your message passes through Meta's systems and then into the limited tools we use to answer and to follow up on appointment requests.

• Human review. Our staff read these conversations in order to answer you, correct an automated reply, and improve service.
• Automation and AI, where enabled. We may use workflow automation and AI-assisted tools to route messages, draft a reply, or summarize a conversation. Any automated reply is for customer service, appointment, product, and general information only — it is not medical, legal, or professional health advice, and staff can review or override it. Where such tools are in use, they are named in section 8.
• No AI training on your messages. We do not intend for your conversations to be used to train public AI models, and we configure provider settings to limit that where the option is available.
• Meta controls its own copies. Meta keeps its own records, logs, and settings for Instagram, Facebook, Messenger, and WhatsApp. Review Meta's privacy policy and your account privacy settings to manage those.
• Do not send sensitive data in a DM or chatbot — see the note in section 3.

8.How we disclose information

Service providers we currently use

If we add other ordinary business tools — for example appointment software, an analytics tool, a payment processor, workflow automation such as n8n, or an AI provider such as OpenAI for drafting replies — we will use them only for the purposes described in this Policy and will update this list.

Other recipients

• Our staff and contractors — to answer you, run consultations, provide services, and manage appointments.
• Payment and financial providers — to process payments, deposits, refunds, fraud checks, and transaction records.
• Professional advisors — lawyers, accountants, insurers, and auditors, for legitimate business, compliance, and risk purposes.
• Government, courts, and safety parties — where required or permitted by law, legal process, public safety, or fraud prevention, or to protect rights and property.
• A buyer or successor — in a merger, sale, financing, or restructuring of the business, with appropriate confidentiality protections.
• Anyone you direct us to — for example if you ask us to share information, or authorize us to publish a testimonial or photo.

We require service providers to use personal information only to provide their service to us, and to keep reasonable confidentiality and security protections. We do not authorize them to use it for unrelated purposes.

9.Cookies and similar technologies

What we use today. This website does not run analytics, advertising, or third-party tracking cookies. It stores two small values in your browser, both strictly necessary: your language choice, and your cookie preference from the notice described below. Our hosting provider also keeps standard server logs, and our form records the anti-abuse data described in section 3.

Your controls. The cookie notice lets you accept all, reject all, or choose by category — Strictly necessary (always on), Analytics, and Marketing. Your choice is stored for 12 months, and you can change or withdraw it at any time from the Cookie settings link in the footer of every page. Non-essential categories stay switched off until you turn them on, and any script in those categories is blocked from loading until then.

If we add analytics or advertising. We will describe them here before or when they go live, and they will run only for visitors who allowed that category. You can also control cookies in your browser settings, and opt out of many interest-based ads through the Digital Advertising Alliance, the Network Advertising Initiative, and the ad settings of Meta and Google.

Opt-out preference signals. Where applicable law requires it, we treat a recognized signal such as Global Privacy Control as an opt-out of sale, sharing, and targeted advertising for the browser or device that sends it. Our cookie notice reads that signal and switches the Marketing category off by default.

“Sale” and “sharing.” We do not sell personal information for money. Some U.S. state privacy laws define “sale” or “sharing” broadly enough that using advertising pixels could fall within it; because we do not currently use them, no such sharing takes place. You may still send us an opt-out request at office@andromeda-beauty.com and we will record it.

10.How long we keep information

We keep personal information only as long as reasonably necessary for the purpose it was collected for, unless a longer period is required or permitted by law. The periods below are enforced by an automated daily clean-up of our request records, not only by policy.

Information held by Meta, payment processors, and other third parties is subject to their own retention settings, which we do not control.

11.Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include limiting access to people who need it, account security controls, a private database that is not readable by the public, secure transmission where available, and deleting or restricting information that is no longer needed.

No method of transmission or storage is perfectly secure. Please do not send passwords, full card numbers, Social Security numbers, or other highly sensitive information by email, text, DM, or chatbot.

If a security incident affects your private information, we will notify you and any authority as required by applicable law, including the New York SHIELD Act.

12.Your privacy rights and choices

Depending on where you live and which laws apply, you may have the right to access, confirm, correct, delete, obtain a copy of, or restrict certain uses of your personal information, and to opt out of sale, sharing, targeted advertising, profiling, or marketing. Even where a particular state law does not apply to us, we will honor reasonable requests voluntarily when we can do so without conflicting with legal, security, payment, accounting, or operational duties.

• Access / know — ask what personal information we hold about you.
• Correction — ask us to fix something inaccurate.
• Deletion — ask us to delete your information; see the Data Deletion Instructions.
• Portability — ask for a copy of what you provided, in a usable format, where required.
• Marketing opt-out — unsubscribe from email, reply STOP to texts, or ask us to remove you from any list.
• Opt out of sale, sharing, or targeted advertising — ask us not to use or disclose your information for those purposes.
• Appeal — if we deny a request and applicable law gives you appeal rights, reply to our decision or write to us.
• No retaliation — we will not treat you differently, or refuse service, because you exercised a privacy right.

To make a request, email office@andromeda-beauty.com, or call or text +1 929 551 5170. Please tell us your name, how to reach you, what you would like us to do, and enough detail to find your record — the phone number, email, Instagram or Facebook handle, or roughly when you contacted us. A subject line such as “Data Deletion Request,” “Marketing Opt-Out,” “Opt Out of Sale/Sharing or Targeted Advertising,” or “Privacy Appeal” helps us route your request faster, but it is not required — we will act on any request we can reasonably understand. We may need to verify your identity first, and we will not ask for unnecessary sensitive information to do so. An authorized agent, parent, or legal guardian may submit a request with proof of authority.

13.Limits on requests

Some rights are not absolute. We may decline or limit a request where law permits or requires it — for example if we cannot verify who you are, if fulfilling it would reveal someone else's information, compromise security, interfere with a legal claim, or conflict with tax, accounting, or payment obligations, or if we are required to keep the record. Where we cannot fulfil all or part of a request, we will explain why to the extent the law allows.

14.Children and minors

Our website, social pages, and messaging are meant for a general adult audience and are not directed to children under 13. We do not knowingly collect personal information online from children under 13 without appropriate parental consent. Salon services for minors may require a parent or guardian to be present and to consent, depending on the service. If you believe a child under 13 has given us personal information online, write to office@andromeda-beauty.com and we will take reasonable steps to delete it.

15.Photos, reviews, and social content

We ask permission before using an identifiable client photo, video, review, or testimonial in our marketing. If you tag us or post about us publicly, we may interact with that content using the platform's normal features. You can ask us to stop using a testimonial or marketing photo that we control, and we will remove it from our active channels within a reasonable time. We cannot recall copies that are already printed, reshared by other people, cached, archived, or held by a third-party platform.

16.Links to other services

Our website, messages, ads, and social pages may link to third-party services — for example Google Maps, WhatsApp, or Instagram. Their practices are governed by their own policies, and we are not responsible for their privacy, security, or content.

17.Visitors outside the United States

We are a local business in Brooklyn, New York, and we serve clients in the United States, and we ship products within the United States only. We do not target or market our services to people in the European Union or the United Kingdom. If you contact us from outside the United States, your information will be processed in the United States and in other countries where our service providers operate, which may have different data protection laws. If the GDPR, UK GDPR, or another international privacy law does apply to your interaction with us, you may have additional rights — write to us and we will address your request.

18.Changes to this policy

We may update this Policy to reflect changes in our practices, services, tools, or legal obligations. The updated version is posted here with a new effective date and version number. Continuing to interact with us after an update means the updated Policy applies to information collected after its effective date, unless the law requires otherwise. If a change is significant, we will make it clear on this page.

19.Contact us