Privacy Policy

Effective Date: April 17, 2026  ·  Last Updated: April 17, 2026

Chaltu's Salon ("we," "us," or "our") operates the website located at www.chaltusalon.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or book an appointment with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.

1. Information We Collect

We may collect the following personal information directly from you:

• Contact information — your name, email address, and phone number when you submit a booking request or sign up for email updates.
• Appointment details — the service you request, your preferred date and time, preferred stylist, and any notes you provide.
• Payment information — when you pay a deposit, your card details are processed directly and securely by Square, Inc. We do not store, transmit, or have access to your full card number, CVV, or billing address.
• Communications — messages or inquiries you send us via the booking form or by phone.
• Email subscription — your name and email address if you opt in to receive updates and notifications.

We may also collect limited non-personal technical information automatically, including your browser type, device type, pages visited, and referring URLs through standard server logs.

2. How We Use Your Information

We use the information we collect to:

• Schedule, confirm, and manage your appointment.
• Send you booking confirmation and reminder emails or SMS messages.
• Process your deposit payment securely via Square.
• Respond to your questions or requests.
• Send you occasional updates about services, availability, and promotions — only if you have opted in. You may unsubscribe at any time.
• Improve our website and services based on aggregate usage patterns.
• Comply with applicable legal obligations.

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers — we work with trusted third-party vendors who help us operate the website and deliver services. These include:
  • Square, Inc. — payment processing (Square Privacy Policy)
  • Resend — transactional and marketing email delivery (Resend Privacy Policy)
  • Twilio — SMS appointment notifications (Twilio Privacy Policy)
  • Cloudinary — image storage and delivery (Cloudinary Privacy Policy)
  • Railway — application hosting and database infrastructure (Railway Privacy Policy)
• Legal requirements — we may disclose your information if required by law, court order, or government request.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Cookies and Local Storage

Our website uses browser localStorage (not tracking cookies) to remember whether you have dismissed our email capture prompt, so we do not show it to you repeatedly. No personally identifiable information is stored in localStorage.

We do not currently use advertising cookies, tracking pixels, or third-party analytics scripts. If this changes, this policy will be updated.

5. Data Retention

We retain your booking and contact information for as long as necessary to provide our services and fulfill the purposes described in this policy — typically for a period of up to 3 years — unless a longer retention period is required by law. Email subscribers may request deletion of their data at any time (see Section 7).

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. Our website is served over HTTPS, and all payment data is handled exclusively by Square using PCI-DSS compliant infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information from our records.
• Opt out of marketing communications at any time by replying STOP to any SMS or clicking unsubscribe in any email.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

8. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. Third-Party Links

Our website may contain links to external sites such as Instagram, Facebook, and Google Maps. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. Your continued use of the website after any changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Chaltu's Salon
• 1524 S State St, Salt Lake City, UT 84115
• Phone: (801) 376-3976
• Email: hello@chaltusalon.com
• Website: www.chaltusalon.com