Privacy Policy

Who we are

Pau Nafeesah's Beauty Room (“we,” “us,” or “the studio”) operates this website and the private, appointment-only beauty studio described on it. We are based in Puerto Rico. The studio location is shared when a visit is confirmed; it is not a walk-in shop.

Questions about this policy: paulanatcruz2001@gmail.com or (787) 464-2599.

Information we collect

We collect only what we need to book and run appointments:

• Name and phone number you enter on the booking form
• Service requested, appointment date and start time, and any note you add for an “Other” service
• Technical basics the host may log to keep the site working and to limit abuse (such as IP address and time of a request)
• Photos the studio takes or that you allow us to use in the Past Customers gallery
• Messages you send us by text, call, or email

We do not ask for payment card numbers on this website. We do not knowingly collect information from children under 13. Beauty services are for guests 18 or older, or minors accompanied by a parent or legal guardian.

How we use it

• Hold your chair, confirm the visit, and send calendar details
• Text or call you about that appointment (reminders, changes, running late, aftercare)
• Notify the studio of a new booking
• Keep the schedule accurate and prevent double-booking
• Show finished looks in our gallery when we have permission
• Protect the site, staff, and other guests (fraud, abuse, or safety)
• Comply with law if we are legally required to keep or disclose records

Texts

If you book online and give a phone number, we use it to send transactional appointment messages (confirmation, calendar link, and scheduling updates). Details are in our SMS Terms. We do not sell your number. We do not use it for unrelated marketing blasts.

Photos

Gallery images are stored so we can display our work. We post a guest’s face or identifiable look only with permission, as described in the Photo Policy. You may ask us to take a photo down at any time.

Cookies

Public pages do not use advertising or analytics cookies. A signed-in staff browser may store an essential login cookie so the owner can manage the calendar and gallery. See the Cookie Notice.

Who we share with

We do not sell your personal information. We share it only as needed:

• Cloudflare, which hosts this website, the appointment database, and gallery files
• Twilio, which delivers text messages when SMS is connected
• The studio owner and authorized staff who run the book
• Authorities if the law requires it, or to protect someone’s safety

How long we keep it

Appointment records are kept as long as needed to run the studio, honor your visits, and meet bookkeeping or legal duties, then deleted or de-identified when they are no longer needed. Gallery photos stay up until we replace them or you ask us to remove yours. Staff login cookies expire on their own (currently 14 days) or when we sign out.

Security

We use HTTPS, access controls for staff tools, and hosting security provided by Cloudflare. No website is perfectly secure. Do not send payment card numbers or medical records through the public booking form.

Your choices

You may ask us to confirm what we have, correct a name or number, cancel or change an appointment, stop appointment texts, or delete a gallery photo of you. Email or text paulanatcruz2001@gmail.com or (787) 464-2599. We may need to verify it is you. We may retain a limited record if the law requires it (for example, that a visit occurred).

Changes

We will post updates on this page and change the date at the top. Continued use of the site after an update means you accept the revised policy.