Privacy policy
Last updated: October 16, 2024
1. Introduction
Welcome to Waves of Beauty ("we," "our," or "us"). We understand the significant trust you place in us when sharing your personal information and take this responsibility with the utmost seriousness. This comprehensive Privacy Policy explains our stringent practices for collecting, using, protecting, and safeguarding your information when you use our services.
2. Information We Collect
2.1 Personal Information
We collect personal information with your explicit consent, including:
- Name and contact information
- Email address
- Appointment scheduling information
- Treatment preferences and history
- Photos (only with written consent)
- Payment information
2.2 Automatically Collected Information
When you use our website, we automatically collect:
- Device information
- IP address
- Browser type
- Usage data
- Cookies and similar tracking technologies
3. How We Protect Your Information
3.1 Security Measures
We implement multiple layers of security:
- 256-bit encryption for all stored data
- Multi-factor authentication for access to client records
- Regular security audits and updates
- Secure, encrypted backup systems
- Limited access protocols for staff
- Physical security measures for paper records
- Regular staff training on privacy and security
- Immediate breach notification protocols
3.2 Data Retention
- Client records are retained for the period required by law
- Secure destruction of records after retention period
- Option for clients to request earlier deletion (where legally permitted)
4. How We Use Your Information
We use collected information strictly for:
- Providing and maintaining our beauty services
- Processing appointments and transactions
- Quality assurance and service improvement
- Legal compliance and reporting requirements
5. Information Sharing and Disclosure
5.1 We Never:
- Sell your personal information
- Share your data for marketing purposes
- Use your photos without explicit consent
- Disclose information to unauthorized parties
5.2 Limited Disclosure
Information is only shared with:
- Legal authorities (when legally required)
- Service providers bound by strict confidentiality agreements
6. Your Enhanced Rights
You have the right to:
- Access your complete personal information
- Receive copies of your records
- Correct any inaccurate data
- Request deletion of your data
- Restrict processing of your information
- Withdraw consent at any time
- Receive your data in a portable format
- File a complaint with supervisory authorities
- Opt-out of all non-essential communications
7. Special Protections
7.1 Photos and Documentation
- Written consent required for before/after photos
- Separate consent for each use of photos
- Right to revoke photo consent at any time
- Secure storage of all visual documentation
8. Incident Response
In the unlikely event of a data breach:
- Immediate notification within 72 hours
- Detailed incident report provided
- Free identity protection services offered
- Full cooperation with authorities
- Remediation steps implemented
9. Changes to This Privacy Policy
We will notify you of any changes via:
- Email notification
- Website announcement
- In-store posting
- Direct client communication
10. Contact Us
For privacy concerns or requests:
Sonja Peverieri
Email: sonja.singletonmft@gmail.com
11. California Privacy Rights
California residents have additional rights under the CCPA, including:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising these rights
12. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of California. Any disputes shall be subject to the exclusive jurisdiction of the California courts.
I acknowledge and certify that this Privacy Policy meets all current legal requirements and implements best practices for client data protection.
Signed,
Sonja Peverieri
Owner, Waves of Beauty
sonja.singletonmft@gmail.com
Date: October 16, 2024