This Privacy Policy explains how Lash L’Atelier ("we," "us," "our") collects, uses, shares, and protects information about you when you visit or interact with our website at lashlatelier.com and any related pages, forms, and services (the "Site"). It also describes your rights and choices regarding your information.
The Site is designed, hosted, and technically maintained on our behalf by Wallink Systems ("the Provider"), which acts as our service provider and processes information only on our instructions to operate and support the Site.
By using the Site, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Site.
1. Who we are
Lash L’Atelier is the party responsible for the personal information collected through the Site (the "data controller" for users in applicable jurisdictions). You can reach us at:
- Phone: (724) 467-3479
- Address: 26 Campbell Street, Hickory, PA 15312
2. Information we collect
We collect information in the following ways:
a. Information you provide directly. When you fill out a contact, quote, booking, or similar form, or otherwise communicate with us, we collect the information you choose to provide — such as your name, business name, email address, phone number, mailing address, the details of your request or message, and any other information you include.
c. Information collected automatically. When you visit the Site, we and our service providers may automatically collect certain technical information, such as your device and browser type, general location (derived from IP address), pages viewed, referring pages, and the dates and times of your visits. This may be collected using cookies and similar technologies (see Section 6) and is used for security, analytics, and improving the Site.
We do not knowingly collect sensitive personal information (such as government-ID numbers, health, or financial-account information) through the Site unless you voluntarily provide it.
3. How we use your information
We use the information we collect to:
- Respond to your inquiries, requests, and messages, and provide the services you request.
- Operate, maintain, secure, and improve the Site.
- Process and fulfill orders or requests, where applicable, and communicate with you about them.
- Send you administrative or transactional messages (such as confirmations or responses to your inquiries).
- Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
- Comply with legal obligations and enforce our terms and agreements.
We do not sell your personal information.
4. Legal bases for processing (where applicable)
Where data-protection laws such as the EU/UK GDPR apply, we process personal information on the following bases: your consent; the performance of a contract with you or to take steps at your request; our legitimate interests in operating and securing the Site and communicating with you; and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.
5. How we share your information
We do not sell your personal information. We share it only as follows:
- Service providers (processors). We share information with trusted vendors who perform services for us and process data on our behalf under contract. These may include:
- Hosting & infrastructure: Vercel (site hosting)
- Database: Supabase (secure storage of form submissions and site data)
- Email delivery: Resend (sending notification and transactional emails)
- Security & performance: Cloudflare (security, DDoS protection, content delivery)
- Rate limiting: Upstash (abuse prevention on forms)
- Website development & maintenance: Wallink Systems (the Provider)
- Legal and safety. We may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud or security issues.
- Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
6. Cookies and tracking technologies
The Site may use cookies and similar technologies to keep the Site functioning, remember your preferences, maintain security, and understand how the Site is used. You can control cookies through your browser settings; disabling some cookies may affect how the Site functions. Where required by law, we will request your consent before setting non-essential cookies, and a cookie/consent notice will be presented on the Site.
Do Not Track. Some browsers offer a "Do Not Track" (DNT) signal. Because there is no common industry standard for how to respond to DNT signals, we do not currently respond to them. We do not track you across third-party websites for behavioral advertising.
7. Analytics
We may use privacy-conscious analytics to understand aggregate Site usage (such as page views and general traffic patterns). This helps us improve the Site. Analytics data is used in an aggregated or de-identified form wherever possible.
8. Data retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Policy — for example, to respond to and follow up on your inquiry, to fulfill an order, to comply with our legal obligations, resolve disputes, and enforce our agreements — after which we delete or de-identify it. Retention periods vary depending on the type of information and the purpose for which it was collected.
9. How we protect your information
We and the Provider maintain administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (HTTPS/SSL), restricted access, secure infrastructure, and industry-standard security practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and any regulators as required by applicable law.
10. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — request that we correct inaccurate or incomplete information.
- Deletion — request that we delete your personal information, subject to legal exceptions.
- Opt out of marketing — unsubscribe from marketing communications at any time.
- Objection / restriction — object to or ask us to restrict certain processing.
- Data portability — request your information in a portable format, where applicable.
- Withdraw consent — where we rely on consent, withdraw it at any time.
California residents (CCPA/CPRA): You have the right to know what personal information we collect, use, and disclose; to request deletion; to correct inaccurate information; and to not be discriminated against for exercising your rights. We do not sell or "share" (as defined by California law) your personal information.
EU/UK residents (GDPR): You have the rights listed above and the right to lodge a complaint with your local data-protection authority.
To exercise any right, contact us by phone at (724) 467-3479 or in writing at 26 Campbell Street, Hickory, PA 15312. We may need to verify your identity before responding, and we will respond within the timeframes required by applicable law.
11. Children's privacy
The Site is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
12. Third-party links
The Site may link to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
13. International visitors
We are based in the United States, and the Site is hosted and operated in the United States. If you access the Site from outside the U.S., your information may be transferred to, stored, and processed in the U.S., where data-protection laws may differ from those in your country. By using the Site, you consent to this transfer.
14. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above and post the updated Policy on this page. Material changes may be communicated by additional means where appropriate. Your continued use of the Site after an update constitutes acceptance of the revised Policy.
15. Contact us
If you have questions or requests regarding this Privacy Policy or your personal information, contact:
Lash L’Atelier (724) 467-3479 26 Campbell Street, Hickory, PA 15312