Privacy Policy

This Privacy Policy ("Policy") applies to https://eloquencewaxskin.com, and Eloquence Wax & Skin LLC ("Company") and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to the Company include https://eloquencewaxskin.com. The Company's website is a professional services site offering waxing, skincare, and related beauty services. By using the Company website, you consent to the data practices described in this statement.

California Consumer Privacy Act and California Privacy Rights Act

If you are a California resident, you have the following rights under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"):

• Right to Know. You may request details on what personal data we collect, use, and share.
• Right to Delete. You can request deletion of personal data, subject to certain legal exceptions.
• Right to Correct. You may request corrections to inaccurate personal information.
• Right to Opt-Out. You can opt out of the sale or sharing of personal data for advertising.
• Right to Restrict Sensitive Data Use. You may limit the use of sensitive personal information.
• Right Against Retaliation. The Company will not discriminate against you for exercising your rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise any right, email hello@eloquencewaxskin.comor use the tools described under "Cookies, Analytics & Your Privacy Choices" below. We will verify your request using the contact details on file and respond within the timeframes the law requires. You may use an authorized agent to submit a request on your behalf.

Colorado Privacy Act (Colorado Residents)

We are based in Arvada, Colorado. If you are a Colorado resident, the Colorado Privacy Act ("CPA") gives you the right to: (a) confirm whether we process your personal data and access it; (b) correct inaccuracies; (c) delete your data; (d) obtain a portable copy; and (e) opt out of the processing of your data for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects.

• We do not sell personal data, use it for targeted advertising, or engage in such profiling.
• We honor universal opt-out mechanisms, including the Global Privacy Control (GPC) browser signal. When we detect a GPC signal, we treat it as a valid opt-out and disable non-essential analytics automatically.
• Processing of sensitive data (see below) is done only with your consent.
• If we deny a request, you may appeal by replying to our decision or emailing us; if your appeal is denied you may contact the Colorado Attorney General.

European Economic Area & United Kingdom (GDPR)

If you are located in the EEA or the UK, we process your personal data under the following lawful bases: performance of a contract (to provide the booking, payment, and account services you request); consent (for marketing emails, non-essential analytics, and any sensitive data you choose to provide); legitimate interests (to secure the site, prevent fraud and abuse, and keep the service reliable); and legal obligation (tax and accounting records). You have the right to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent at any time without affecting prior processing. You may also lodge a complaint with your local supervisory authority. We transfer data to service providers located in the United States; where required, those transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Sensitive & Health-Related Information

Our services include intimate-area and skin treatments. To perform them safely you may choose to tell your esthetician about allergies, sensitivities, skin or scalp conditions, medications, pregnancy, recent procedures, or that it is your first time receiving a treatment. This information is sensitive. We collect it only when you provide it, use it solely to deliver your treatment safely and to keep appropriate service records, and we do not sell it or use it for advertising. Where the law (CPA, CPRA, or GDPR) requires consent to process sensitive data, your act of providing it for your treatment, together with your acceptance of this Policy, constitutes that consent; you may withdraw it by contacting us, subject to our ability to safely provide the service. We are a beauty-services provider and are not a HIPAA-covered entity.

Collection of your Personal Information

In order to better provide you with products and services offered, the Company may collect personally identifiable information, such as your:

• First and last name
• Email address
• Phone number
• Appointment details (services selected, date, time, notes you provide)
• Payment information processed by our payment processor (we do not store card numbers; see "Service Providers" below)
• Account credentials (a password you set if you use our client portal — stored only as an encrypted hash)
• Skin, scalp, or health information you choose to disclose to your esthetician for safe treatment (e.g. allergies, sensitivities, medications, photo consent)
• Technical information such as IP address, browser type, and access times collected automatically for security and operational purposes

We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) booking an appointment; (b) creating a client portal account; (c) joining our waitlist; (d) sending us an email message; (e) submitting your information through our contact form; (f) paying for a service via the secure checkout. We will use your information for, but not limited to, communicating with you in relation to services and/or products you have requested from us.

Service Providers

We rely on the following third-party processors to operate the Website and deliver services. Each is bound by their own privacy commitments and may receive only the data necessary for their function:

• Supabase — database hosting, account authentication, and session management.
• Stripe — payment processing, customer records, and refunds. Card numbers are entered directly into Stripe's checkout and never touch our servers.
• Render — application hosting infrastructure.
• Resend — delivery of transactional emails (booking confirmations, receipts, password resets).
• Cloudflare Turnstile — anti-bot verification on public forms.
• Sentry — error monitoring, performance, and limited session replay used to diagnose problems and keep the site reliable. Session replay and performance tracing run only with your analytics consent (see below).
• Anthropic (Claude) — powers an internal AI scheduling assistant used only by our staff. It receives minimized business data only. Email addresses are removed and last names are shortened to an initial, and your data is not used to train AI models.
• Microsoft 365 (Outlook Calendar) — when calendar sync is enabled, your appointment date, time, and first name are added to the owner's business calendar so the schedule stays accurate across our services.

Data Retention

We retain personal information only as long as needed to provide our services and to comply with legal obligations:

• Appointment and payment records are retained for the period required by tax, accounting, and payment-processor regulations (typically seven years).
• Client portal account data (your sign-in details, contact info, waitlist entries) is retained until you delete your account or request deletion.
• Operational and security logs (including IP addresses) are retained for a limited period for fraud prevention and abuse mitigation.

Use of your Personal Information

The Company collects and uses your personal information in the following ways:

• To operate and deliver the services you have requested
• To provide you with information, products, or services that you request from us
• To provide you with notices about your appointments
• To carry out the Company's obligations and enforce our rights
• To notify you about changes to https://eloquencewaxskin.com or any services we offer
• In any other way we may describe when you provide the information
• For any other purpose with your consent

Sharing Information with Third Parties

The Company does not sell, rent, or lease its customer lists to third parties. The Company may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to the Company, and they are required to maintain the confidentiality of your information.

The Company may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on the Company or the site; (b) protect and defend the rights or property of the Company; and/or (c) act under exigent circumstances to protect the personal safety of users of the Company, or the public.

Cookies, Analytics & Your Privacy Choices

We use a small number of technologies in two categories. We do not use advertising or cross-site tracking cookies, and we do not sell your information.

• Strictly necessary (always on, no consent required): sign-in and session cookies, secure checkout via Stripe, and Cloudflare Turnstile bot protection. The site does not function without these.
• Analytics & monitoring (off until you opt in): Sentry error tracking, performance tracing, and limited, sampled session replay, used only to diagnose issues and keep the site reliable.

When you first visit, a banner lets you Accept all, Reject non-essential, or set Preferences. You can change your choice at any time using the "Your Privacy Choices" link in the site footer. If your browser sends a Global Privacy Control (GPC) signal, we automatically treat it as an opt-out and keep analytics off. Most browsers also let you block or delete cookies in their settings; doing so may affect site functionality.

Automatically Collected Information

For security and operation we automatically process limited technical information such as your IP address, browser type, access times, and the pages you request. This is used to operate and secure the service, prevent fraud and abuse, and maintain reliability — not to build advertising profiles.

Security of your Personal Information

The Company secures your personal information from unauthorized access, use, or disclosure. The Company uses SSL Protocol for this purpose. We strive to take appropriate security measures to protect against unauthorized access to or alteration of your personal information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure.

Right to Deletion

You can permanently delete your client portal account at any time. Sign in at https://eloquencewaxskin.com/account, scroll to the Delete account section, and follow the prompt. This action cannot be undone.

When you delete your account:

• Your sign-in credentials and contact information are permanently removed.
• Your waitlist entries and queued communications are deleted.
• Your past appointment records are retained for tax and payment-processor compliance, but your name, email, and phone number on those records are replaced with anonymized values and your notes are cleared.

If you have not used the client portal but want your information removed, or if you want to request a copy of the personal information we hold about you, contact us at hello@eloquencewaxskin.com.

Children Under Thirteen

The Company does not knowingly collect personally identifiable information from children under the age of 13. If you are under the age of 13, you must ask your parent or guardian for permission to use this website.

Email Communications

By providing your email address to the Company — whether through booking, the client portal, our contact form, or the waitlist — you consent to receive transactional communications from us by email. Transactional means messages directly related to a service or order you requested from the Website, including:

• Booking requests, confirmations, reminders, and changes
• Payment receipts, deposit links, and refund confirmations
• Waitlist notifications and slot offers
• Account-related messages (password resets, account-deletion confirmations)
• Replies to your inquiries

Marketing communications are separate and only sent if you have opted in. These are limited to our own offerings — promotions and specials, announcements, and occasional re-engagement messages (for example, if we have not seen you in a few months and want to invite you back). We do not sell or rent your information, and we do not use it for third-party or cross-site advertising. You may unsubscribe from marketing at any time by clicking the unsubscribe link at the bottom of any marketing email. Unsubscribing from marketing does not stop the transactional messages above, because those are tied to services you have asked us to perform.

Changes to This Statement

The Company reserves the right to change this Policy from time to time. When changes to this Policy are significant, we will inform you. Your continued use of the website and/or services available after such modifications will constitute your acknowledgment of the modified Policy and agreement to abide and be bound by that Policy.

Contact Information

Eloquence Wax & Skin LLC welcomes your questions or comments regarding this Policy. If you believe that the Company has not adhered to this Policy, please contact us at:

Eloquence Wax & Skin
7330 W 52nd Ave, Suite T
Arvada, CO 80002

Email: hello@eloquencewaxskin.com
Phone: (707) 816-9906

Effective as of June 15, 2026