Privacy Policy

1. Information we collect

• Contact and account information: your name, email address, phone number, and information you provide when booking, subscribing, or contacting us. For concierge appointments, this may include the service address and access instructions you provide.
• Appointment and transaction information: services requested, appointment history, preferences, purchases, memberships, packages, gift cards, payment status, and billing details. Payment information is handled through our booking and payment providers; please do not send card numbers through ordinary email or our general contact form.
• Communications and choices: messages you send, feedback, marketing preferences, consent records, and opt-out requests.
• Service-related information you provide: information on intake or consent forms, such as allergies, sensitivities, relevant health information, and service preferences. We may also receive photos or testimonials you choose to provide.
• Website and device information: IP address, browser and device information, approximate location derived from IP address, referring pages, pages visited, and interactions with our website or emails. Cookies, tags, and similar technologies may collect this information.

Information comes directly from you, from your interactions with our website and messages, and from providers that help us deliver the services you request.

2. How we use information

We use personal information to:

• Schedule, confirm, manage, and follow up on appointments; provide salon and concierge services; and personalize your experience.
• Process payments, purchases, memberships, packages, refunds, and related records.
• Answer questions, provide customer support, and maintain service and consent records.
• Send appointment communications and, subject to your choices and applicable consent requirements, newsletters, offers, and other marketing.
• Understand website performance, measure advertising, improve our services, and help prevent fraud, abuse, or unauthorized activity.
• Meet legal obligations, resolve disputes, and protect the rights and safety of clients, staff, and our business.

3. When we share information

We may disclose information in these circumstances:

• Service providers: businesses that support booking, payments, communications, website hosting, email delivery, customer support, and business administration. These include Boulevard for booking and related salon operations, Showit and WordPress for website services, and Flodesk for email subscriptions and communications.
• Analytics and advertising providers: online identifiers and activity information may be disclosed through website tools, including Google services, as described below.
• Legal and safety purposes: when reasonably necessary to comply with law or legal process, address fraud or security issues, enforce agreements, or protect rights and safety.
• Business changes: in connection with a proposed or completed merger, financing, reorganization, or sale of our business or assets, subject to applicable privacy obligations.
• At your direction: when you ask us to share information or give permission for a specific use.

Our existing commitment not to share mobile information with third parties or affiliates for their own marketing or promotional purposes applies to our text-messaging programs. Mobile numbers, messaging consent records, and opt-in information may be disclosed to providers supporting the operation and delivery of those programs, rather than for those providers’ independent marketing.

4. Cookies, analytics & advertising

Our website uses cookies and similar technologies for functionality, performance measurement, and advertising. We use Google Analytics and Google advertising tags, including tools delivered through Google Tag Manager. These tools may receive information such as your IP address, online identifiers, page visits, referral information, and interactions. Advertising providers may use information across websites or services, depending on their practices and your settings.

Disclosures of online identifiers and activity to advertising providers can be treated as a "sale," "sharing," or processing for targeted advertising under some privacy laws, even when no money is exchanged. This is different from selling a client contact list.

Your cookie and advertising choices

• Use your browser or device settings to block or delete cookies and limit tracking. Blocking cookies may affect some website features and does not necessarily stop every type of data collection.
• Review how Google uses information from partner sites and Google’s advertising settings.
• For supported desktop browsers, Google provides an Analytics opt-out browser add-on.
• Contact us using the details below to submit an applicable request concerning the sale, sharing, or targeted-advertising use of your information. Browser and provider settings are device- and browser-specific.

Cookie and advertising practices can differ when you follow a link to a third-party booking, payment, social media, or other service. Review that service’s notices and controls.

5. Email & text messages

Email

You may unsubscribe from promotional emails using the unsubscribe link in an email or by contacting us. We may still send non-promotional communications relating to an appointment, purchase, account, or other interaction you have requested, as permitted by law. Email tools may record opens, clicks, and related device information to help us understand delivery and engagement.

Text messages

Providing a phone number is not, by itself, consent to receive promotional texts. Where required by law, marketing messages, including automated marketing texts, require a separate opt-in. Consent to marketing texts is not a condition of purchasing services. Message frequency varies, and message and data rates may apply.

Reply STOP to a text to opt out of that messaging program. Reply HELP for assistance, or contact us at 713-281-2474 or Logann@shadedandcompany.com. You may also contact us to withdraw consent or change communication preferences. We process requests as required by applicable law. A permitted confirmation message may follow an opt-out. Carrier or provider limitations can affect message delivery.

Appointment-related messages and marketing subscriptions can involve separate programs. Tell us if you want to stop all texts so we can help update the relevant preferences. Any separate messaging terms presented when you enroll also apply.

6. Service information & photos

If you provide allergies, sensitivities, relevant health details, or other service-related information, we use it to consider service suitability, personalize your appointment, maintain relevant records, and address questions or concerns. We seek consent where applicable law requires it. Please use the intake process provided for your appointment rather than sending medical records or other sensitive information through the general website contact form.

Service consent does not, by itself, authorize public marketing use of identifiable photos or testimonials. If we request permission to use your image, before-and-after photos, or testimonial for marketing, that permission is separate from this privacy notice. Contact us about questions or withdrawal of permission for future uses; material already printed, distributed, or reposted by others may not be recoverable.

7. Your choices & privacy requests

Depending on your location, the information involved, and which laws apply to our business, you may have rights to access or confirm our processing of your information, obtain a copy, correct inaccuracies, request deletion, and opt out of certain sales, sharing, targeted advertising, or legally defined profiling. Not every right applies in every circumstance.

To submit a request, email Logann@shadedandcompany.com with the subject "Privacy Request," call 713-281-2474, or write to the address below. Describe your request and how we can contact you. Do not include card numbers, government identification numbers, or medical records in an initial request.

We may ask for reasonable information to verify your identity or, where permitted, an authorized agent’s authority. We respond within applicable legal deadlines and explain any lawful exception or extension. For requests governed by the Texas Data Privacy and Security Act, the applicable response period is generally 45 days, with an additional 45 days when permitted and explained.

If a law gives you an appeal right and we decline your request, reply to our decision or contact us with the subject "Privacy Appeal." We will review the decision and respond within the applicable period; under the Texas Act, an appeal response is due within 60 days. Where required, our response will explain how to contact the appropriate regulator. We will not unlawfully discriminate against you for exercising a privacy right.

8. Retention & security

We retain information for as long as reasonably needed for the purposes described in this policy, including providing services, maintaining appointment and consent records, meeting tax and other legal requirements, handling disputes, preventing fraud, and respecting marketing opt-outs. The period depends on the type of information, our relationship with you, legal obligations, and any applicable legal hold. A deletion request may be subject to these exceptions.

We use reasonable safeguards intended to protect personal information, including the protections provided by the services we use. No website, email, storage system, or transmission method can be guaranteed completely secure. Please contact us if you believe information connected with our business has been compromised.

Our business operates in the United States. Providers may process information in the United States or other locations, subject to applicable law and their service arrangements.

9. Children & minors

Our website is not directed to children under 13. We do not knowingly collect personal information online from children under 13 without any consent required by law. If you believe a child has provided information without appropriate authorization, contact us so we can investigate and take appropriate action. Service eligibility and any parent or guardian consent requirements are addressed separately through our booking and service policies.

10. Third-party services

When you use booking, payment, email, social media, or other third-party services, their own privacy notices may also apply to their independent activities. Our website may link to or display content from third parties. We do not control those third-party websites or their privacy settings. Review the notices and choices presented by the service you use.

For booking-related information we handle, direct privacy requests to Shaded & Co. using the contact details below so we can coordinate with the relevant provider when needed.

11. Changes to this policy

We may update this policy as our services, providers, practices, or legal obligations change. We will revise the "Last updated" date when we do so and provide additional notice or obtain consent when required by law.

12. Contact us