This Privacy Policy explains how Sarah Kay Skin Studio collects, uses, and protects your personal data. We are committed to handling your information transparently and in accordance with applicable privacy laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and relevant United States privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).
1. Who We Are
Sarah Kay Skin Studio is the data controller responsible for your personal data.
Address: 1133 Broadway, Suite 1425, NY, NY 10010, USA
Email: [email protected]
2. Information We Collect
We may collect and process the following categories of personal data:
- Name and surname
- Email address
- Phone number
- Appointment and service details
- Billing and shipping address
- Order history and transaction details
- Any information you provide through contact forms or messages
- Technical data such as IP address, browser type, and device information
- Website usage data through cookies and analytics tools
We do not store full payment card details. Payments are processed securely through third-party payment providers.
3. How We Collect Information
We collect your data when you:
- Submit a contact form
- Book an appointment
- Place an order through our website
- Contact us via email, phone, or social media
- Browse our website through cookies and analytics tools
4. How We Use Your Information
We use your personal data to:
- Manage and confirm appointments
- Process and fulfill orders
- Deliver products and manage shipping
- Communicate with you regarding your inquiries, bookings, or purchases
- Provide customer support, including handling returns or issues
- Improve our website and services
- Send updates or marketing communications where permitted
- Detect and prevent fraud or unauthorized transactions
- Comply with legal and regulatory obligations
5. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your data based on:
- Consent when you voluntarily provide your information or agree to marketing
- Contractual necessity to provide requested services or fulfill orders
- Legitimate interests to improve our services, website performance, and customer experience
- Legal obligations where required by law
6. Sharing of Information
We do not sell your personal data.
We may share your information with trusted third parties when necessary, including:
- Website hosting providers
- WooCommerce and related e-commerce systems
- Payment service providers for secure transaction processing
- Shipping and delivery partners
- Analytics providers such as Google Analytics
These providers are required to handle your data securely and in accordance with applicable laws.
7. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve functionality, analyze traffic, and enhance user experience.
Where required by law, we will request your consent before using non-essential cookies. You can manage or disable cookies through your browser settings.
8. Data Retention
We retain personal data only for as long as necessary:
- Appointment and client records for up to 3 years after your last interaction
- Order and transaction records retained for legal, tax, and accounting purposes as required by applicable law
- Contact form submissions for up to 12 months
9. Your Privacy Rights
GDPR Rights (EEA Users)
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal data we collect and how it is used
- Request deletion of your personal data
- Request correction of inaccurate data
- Opt out of the sale or sharing of personal data
We do not sell personal data.
To exercise your rights, contact us at [email protected]
10. International Data Transfers
Your information may be processed outside your country of residence, including in the United States.
Where required, we implement appropriate safeguards such as Standard Contractual Clauses to protect your data.
11. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices.
13. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
14. Contact Us
If you have any questions or wish to exercise your privacy rights, please contact us:
Email: [email protected]
Address: 1133 Broadway, Suite 1425, NY, NY 10010, USA