Privacy Policy

This policy explains what information is collected when you visit lashedbymercedez.com (the "site") or book with Lashed By Mercedez("Lashed By Mercedez", "I", "me"). It is written in plain English. If anything is unclear, message me on Instagram.

The short version

• This site has no contact form, no account sign-up and no database. It does not ask for your name, phone number or email.
• Your name, phone number, email and payment details are entered only inside Cal.com (booking) and Stripe (deposit payment), which handle that data under their own privacy policies.
• Inspiration photos are sent through Instagram direct messages, never uploaded to this site.
• Analytics and advertising cookies are only used if you click Accept. You can change your choice at any time.
• I do not sell your personal information.

Information collected

When you book (Cal.com and Stripe)

Booking happens in a Cal.com window. Cal.com collects the details you enter, such as your name, email, phone number, appointment time and your answers to booking questions (for example a style description or inspiration link, and whether you agree to text reminders). Your deposit is processed by Stripe; I never see or store your full card number. See theCal.com privacy policy and theStripe privacy policy.

I use your booking details only to schedule, confirm, remind you about and provide your appointment, and to keep basic client records. I keep booking and service records only as long as I need them to provide services, answer questions, and meet tax and legal requirements, then delete them.

When you message me (Instagram)

Messages and photos you send through Instagram are handled by Meta under the Instagram privacy policy. I use them only to plan your lash set.

When you browse the site

Like most websites, the site's host (Cloudflare) processes technical data such as your IP address, browser type and pages requested to deliver and secure the site.

Cookies and your choices

When you first visit, you can Accept or Decline cookies. Until you choose, analytics and advertising storage is turned off (this uses Google Consent Mode, which may still send limited, cookieless signals to Google that do not identify you).

• Analytics (Google Analytics 4): counts visits and how the page is used, so I can improve it. Only with your consent.
• Advertising (Google Ads, Meta): measures whether my ads lead to bookings. Only with your consent.
• Ad click details: if you arrive from an ad, the site notes the ad click ID and campaign tags (such as gclid, fbclid and utm parameters) so a booking can be credited to the right ad. These are saved in a first-party cookie named lash_attr for up to 90 days only if you click Accept.
• Your choice itself is saved in your browser's local storage so the banner doesn't keep appearing.

To change your choice, use "Cookie settings" in the footer of any page. You can also clear cookies in your browser settings.

If your browser sends a Global Privacy Control (GPC) signal, the site treats it as a request to opt out of sale or sharing and keeps advertising storage off, even if you click Accept.

Text message reminders

When you book, you'll be asked whether it's OK to text you appointment reminders. If you agree, you'll receive appointment-related texts only (confirmations, reminders and changes), not marketing. Message frequency varies by appointment. Message and data rates may apply. Reply STOP to opt out at any time. Reminder texts are sent through my booking provider.

Who information is shared with

I share information only with service providers that help me run the business: Cal.com (scheduling), Stripe (payments), Google (calendar, analytics, ads), Meta (Instagram, ads) and Cloudflare (hosting). I do not sell personal information.

Using advertising cookies to measure ads may count as "sharing" for cross-context behavioral advertising under California law. That is why those cookies are off unless you click Accept, and why GPC signals are honored.

Your California privacy rights (CCPA/CPRA)

If you live in California, you have the right to:

• Know what personal information I collect, use and share.
• Ask me to delete personal information I hold about you, with some legal exceptions (for example, records I must keep for taxes).
• Ask me to correct inaccurate information.
• Opt out of the sale or sharing of your personal information (I don't sell it; you can opt out of sharing by declining cookies or using GPC).
• Limit the use of sensitive personal information (I don't use it beyond providing your service).
• Not be treated differently for using these rights.

To make a request, send me a direct message on Instagram. I'll confirm your request and respond within the time the law requires. Data held by Cal.com, Stripe, Google or Meta can also be requested directly from them.

Children

This site and my services are not directed to children under 13, and I do not knowingly collect their information. I don't serve clients under 16, and clients aged 16 or 17 must have a parent or legal guardian present.

Security

The site is served only over HTTPS and stores no personal information itself. Booking and payment details are handled by Cal.com and Stripe.

Changes

If this policy changes, the updated version will be posted here with a new effective date.