Last Updated: October 2026

This policy explains how Hair By Rachel Charles collects and uses information when you visit this website, book, or get in touch.

Information We Collect

When you book an appointment or contact us, we may collect your name, email address, phone number, and hair service preferences. This information is used to respond to your request and support the service you choose.

How We Use Your Information

The optional pre-visit form asks for the name and email you booked with. This helps Rachel match your notes to your appointment. You may share your age, routine, hair preferences, products, color history, appointment date, and quiet-visit preference. Netlify, our website form provider, processes these answers so Rachel and authorized website operators can prepare your visit. The form does not sign you up for marketing. Please leave out diagnoses and other medical details.

We use your information to schedule appointments, communicate about your services, and, when supported by the booking provider, send appointment updates or reminders. Optional website analytics and advertising are controlled by your privacy choices below.

Cookies

The website may use essential browser storage for functionality. It uses Google Analytics and Microsoft Clarity only when you allow Analytics in the site's privacy settings. Advertising is a separate choice and is off by default, including for visitors who previously allowed analytics.

If you allow Analytics, Google Analytics receives page views, public link and button clicks, scrolling, media use, site performance, and form progress counts. If you submit a contact or pre-visit form, we use a protected code made from your email to match your visit to later Square booking and payment records. Google receives the matching browser ID, booking status, approved service category and purchase or refund amount, not your email or form answers.

The same Analytics choice also turns on Microsoft Clarity, which records how pages are used, such as clicks, taps, scrolling and mouse movement, to create heatmaps and session recordings. Form fields are masked in those recordings, so what you type is not captured. Recordings include the full address of each page you visit, including anything after a "?" in it. Clarity does not run on the optional pre-visit form, stays off when your browser sends Global Privacy Control, and is never given advertising permission.

Microsoft collects or receives personal data from this site through Clarity, such as these recordings and your device and browser details, to provide Microsoft Clarity and Microsoft Advertising. Clarity sets the _clck and _clsk cookies on this site. Whenever Clarity loads, Microsoft also sets its own cookies on Microsoft domains such as bing.com and clarity.ms, including MUID, which lasts about a year; withholding advertising permission does not stop those. See the Microsoft Privacy Statement for how Microsoft uses this information.

If you separately allow Advertising, Meta Pixel and Conversions API can receive site actions, booking status, purchase or refund amounts, cookie IDs, and a hashed version of your submitted email. Hashing turns the email into a code; Meta can use that code to match its accounts. Meta and Google may use consented activity to measure and personalize ads. This choice does not sign you up for email marketing. Automatic form scraping and automatic advanced matching are disabled.

Consultation answers, age, quiet-visit preferences, diagnoses, free-text messages, card numbers and payment credentials are excluded from Google and Meta events and from Microsoft Clarity. Form progress records only counts, never answers or field names. A Square handoff is booking intent; an accepted booking is a confirmed reservation, and a payment is a payment. Neither proves that a visit took place.

We also keep restricted business records of Square booking changes, payments, refunds and delivery of measurement events. They let us check totals and retry a failed connection. These records use protected identifiers, are hosted by Netlify, and are kept for up to 90 days. The optional browser-matching cookie lasts up to 90 days. Square keeps its own appointment and transaction records under its privacy policy. Withdrawing consent on this browser stops future optional sharing from its matched visit.

You can reject optional tracking or change either choice through Privacy settings in the footer. We honor Global Privacy Control by keeping advertising and Microsoft Clarity off. Withdrawing a choice stops future measurement by that tool; turning off Analytics also ends any Clarity recording and removes the _clck and _clsk cookies from this site. Microsoft's own cookies, such as MUID, stay on Microsoft domains until you clear them in your browser settings. Withdrawing does not erase information already received. See Meta's Privacy Policy for how Meta uses information and the controls it offers.

Website Security

To review unusual use of the appointment calendar, we may keep limited server records of availability requests and whether a linked website booking was created. These records use a protected code derived from the network address rather than storing the address itself. They do not contain your name, contact details, appointment notes, or payment data. A shared network address may represent several people; these records do not identify who visited or why.

Access is restricted to authorized website operators. Detailed security records are retained for up to 30 days, and minimal alert and review records for up to 90 days. Limited records may be processed by our hosting and alert-email providers. This security review is separate from optional analytics and does not use session recordings, device fingerprinting, or advertising profiles.

Your Rights

You have the right to request access to, correction of, or deletion of your personal data. Contact us at Rachelhopec@gmail.com to exercise these rights.