Privacy Policy

Who We Are

HAIRBYDAISY is a private hair studio operated by Daisy, located at 123 James Avenue, Suite 502, Winnipeg, Manitoba. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website or book an appointment.

Information We Collect

When you submit a booking request, we collect:

• Full name
• Email address
• Phone number
• Preferred service, date, and time
• Any notes you provide about your appointment

We do not collect or store payment card numbers. Deposit payments are processed securely through our payment processor (Stripe or Elavon Converge), which operates under its own privacy and security standards. Card data is entered directly into the processor's secure environment and never touches our servers.

How We Use Your Information

Your information is used solely to:

• Confirm and manage your appointment
• Send you appointment confirmation emails
• Contact you about rescheduling or cancellations
• Maintain a record of your visit history to serve you better

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Data Storage

Appointment and client records are stored locally within the studio's secure admin system and, where enabled, in Supabase (a cloud database provider). Supabase stores data on encrypted servers in compliance with industry security standards.

This website uses your browser's localStorage to remember your preferences during a session. No tracking cookies or advertising cookies are used.

Email Communication

By submitting a booking, you consent to receiving a confirmation email at the address you provide. You may reply to any email to opt out of future communications. We do not send unsolicited promotional emails.

Your Rights (PIPEDA — Canada)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Know what personal information we hold about you
• Request corrections to inaccurate information
• Request deletion of your personal information

To exercise any of these rights, contact us at the email or phone listed on our Contact page.

Third-Party Services

This website uses the following third-party services. Each receives the personal information described and is bound by their own privacy policy:

• Supabase — cloud database that stores appointment records and site configuration. Data is encrypted at rest and in transit. Supabase Privacy Policy
• Resend — transactional email delivery (booking confirmations and reminders). Receives your name and email address to deliver appointment emails. Resend Privacy Policy
• Stripe — payment processing for deposit payments. Receives payment card details directly; we never see or store your card number. Stripe Privacy Policy
• Elavon Converge — alternative payment processing for deposit payments. Same card-data isolation as Stripe. Elavon Privacy Policy
• Google Fonts — typography (fonts are loaded from Google's servers, which may log your IP address). Google Privacy Policy

Data Retention

Appointment and client records are retained for a period of seven (7) years to support business records and applicable tax obligations, after which they are deleted. Contact form messages are retained for no longer than two (2) years. You may request earlier deletion at any time by contacting us directly — requests are honoured within 30 days unless retention is required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes are posted constitutes acceptance of those changes.

Contact

Questions about this policy? Reach us through our Contact page.