1. Who We Are
This Privacy Policy describes how Suga ("we," "us") collects and uses your personal information. We utilize a third-party software platform, Suga, to manage our operations and securely process your data.
2. Information We Collect
We collect information you provide directly to us during onboarding or checkout, including:
- Contact Info: Name, Phone Number, Email Address.
- Personal Details: Date of Birth (Month/Day) for birthday rewards.
- Transaction Data: Services booked, products purchased, and amount spent (for loyalty tracking).
- Usage Data: Appointment history and gift card balances.
3. How We Use Your Information
We use your data to:
- Create and manage your customer account.
- Track and issue Loyalty Points.
- Schedule and confirm appointments.
- Send you digital gift cards.
- Send marketing communications (only if you have opted in).
4. Data Sharing and Processors
We do not sell your personal information to third parties. We share data strictly with service providers necessary to operate our business:
- Suga360: Our operational software provider (Processer) who stores and secures your data.
- Communication Providers: SMS and Email gateways used to deliver our messages to you.
5. Your Choices & Opt-Outs
- Marketing: You can opt out of marketing SMS by replying "STOP" and emails by clicking "Unsubscribe." You will still receive transactional messages (e.g., "Your appointment is confirmed").
- Access & Correction: You may request to see the data we hold about you or correct your phone number/email by contacting us in-store.
6. YOUR STATE PRIVACY RIGHTS
Depending on where you live, you may have specific rights regarding your personal data.
A. California, Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia
If you are a resident of these states, you have the following rights:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Correction: You may ask us to fix inaccurate data (e.g., incorrect name or purchase history).
- Right to Deletion: You may ask us to permanently delete your personal data (subject to legal record-keeping requirements).
- Right to Portability: You may request a copy of your data in a portable, machine-readable format.
- Right to Opt-Out: You may opt out of the "sale" of your personal data or the processing of your data for "Targeted Advertising." (Note: We do not sell your data for money, but we may use third-party tools for marketing which some state laws classify as "selling/sharing".)
How to Exercise: To exercise these rights, please contact the Business directly in-store or reply to any of our emails with the subject line "Privacy Request."
B. Washington State Residents (My Health My Data Act)
If this Business provides health-related services (e.g., skincare, massage therapy) and collects data about your health conditions, allergies, or treatments:
- We collect this "Consumer Health Data" strictly to provide the services you requested.
- We do not sell your health data without your valid, separate authorization.
- You have the right to withdraw consent and delete your health data at any time.
C. Nevada Residents
You have the right to opt-out of the sale of certain personally identifiable information. Although we do not currently sell your data, you may submit a request to be added to our do-not-sell list.
7. Data Retention
We retain your profile and loyalty data for as long as you are an active customer. If you wish to delete your account and forfeit your loyalty points, please contact us directly.
8. Security
We and our partners (Suga) employ industry-standard security measures (encryption and secure servers) to protect your personal information from unauthorized access.
9. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal data from children under 13 without parental consent.
10. Contact Us
If you have questions about this privacy policy, please speak with the management at Suga or email us at us.suga360@gmail.com.