Privacy
What we collect, who else sees it, and how to get it back or deleted.
Last updated . This version has its own address, and keeps working after the next one replaces it.
The short version
We collect what we need to do your hair and to reach you about your appointment. We do not sell anything to anyone. You can ask us what we hold about you, and ask us to delete it.
What we collect, and why
Nothing on the booking form is required unless it is marked as required.
| What | Why |
|---|---|
| Your name, phone number and email | To confirm your appointment and reach you about it |
| Your address | Only when we are coming to you, so we can get there |
| What you choose to tell us about your hair | So the braider is prepared before you arrive |
| How you found us | So we know which of our own pages and posts are working |
Who else is involved
Only the services that make a booking work, and each only for that purpose:
- Supabase stores your booking, on servers in Canada.
- Resend sends your confirmation and the emails about your appointment.
- Twilio sends confirmation and reminder text messages, once a booking is confirmed.
- Telegram is how the studio is told about a new booking. That message carries your name and the appointment. It does not carry your address or your email.
- Google or Apple, where the braiders keep their calendars. Your appointment goes into them, and if a braider has connected hers, we read back when she is busy. What each of those carries is below.
Calendars
Two things happen with calendars, and they go in opposite directions.
Your appointment goes into the braiders' calendars. Each braider has a calendar we create for the studio in her own Google account, and every confirmed booking goes into each of them, so both braiders know who is coming and when. The entry carries everything on your booking, so she does not have to look anything up: the service and its price, your name, phone number and email, your Instagram if you gave it, the address when she is coming to you, what you told us about your hair, any note you left, the studio's own note about the booking, and what has been paid and what is left to pay on the day. It is marked private in her calendar.
A braider can also use a private link that puts her own appointments into another calendar app, such as Apple Calendar. That copy carries less: the service, your name, your phone number, the booking reference, and the address when she is coming to you. The link is not published anywhere, and the studio can replace it whenever they like.
When she is busy comes back to us, if she has connected her calendar, so the site stops offering times she has already given to something else.
- We ask Google for three things and can do nothing else with what she grants. See the list of her calendars, so she can tick which ones count. Read when she is busy, as start and end times with nothing attached. Write into one calendar we create for the studio, and no other.
- What comes back is times. There is nowhere in this system to keep the name of an event, its description, who else is going, or even the name of a calendar. Not empty: absent.
- None of it is about you. It is her own diary, and the only reason to look at it is to avoid offering you an hour she cannot work.
- She can disconnect whenever she likes. We hand the access back to Google, and every busy time it gave us is deleted. Appointments already in her studio calendar stay there until she deletes that calendar, because it is in her own account.
How long we keep it
Your details stay while they are needed for your appointments and for reaching you afterwards, and are removed once they are not.
Marketing
Only if you ticked the box, and it starts unticked. Every message sent that way has a working unsubscribe link. Confirmations and reminders about your own appointment are not marketing, and those are always sent.
Your rights
Ask us what we hold about you and we will tell you. Ask us to correct it and we will. Ask us to delete it and we will. Message us on Instagram or call +1 437-755-0262.
If something goes wrong
If your information is ever exposed in a way that could genuinely harm you, we will tell you and report it to the Privacy Commissioner of Canada, as the law requires.