Effective Date: September 6, 2026

Privacy Policy

Emily SkinCare & Spa operates a single-studio app and website for booking physical, in-person skincare appointments in Kearney, Nebraska.

Operator and Contact

Operator: Emily SkinCare & Spa. Privacy and account requests may be sent to support@emilyskincare.com or submitted through the Support page.

Information We Collect for Appointments

When you create an account, contact the studio, or book an appointment, Emily SkinCare & Spa may collect profile and authentication information, your name and contact information, service and add-on selections, appointment date and time, consultation details you choose to provide, policy acceptance, deposit and payment metadata, and support messages.

Necessary Booking, Security, and Payment Services

The app and website use Firebase and Google Cloud for authentication, booking data, backend services, reliability, and security. Firebase App Check and reCAPTCHA Enterprise help protect the public booking system from automated abuse. These necessary services may process technical request information such as an IP address, browser or device information, security tokens, and timestamps.

Appointment payments are processed by Square. Emily SkinCare & Spa does not store full card numbers or CVV codes in the app or website. Square receives the payment information needed to authorize and process the amount you choose to pay.

Optional Website Analytics

Google Analytics 4 starts automatically for visitors whose country is identified as the United States or Puerto Rico, unless a saved privacy choice keeps it off. In other countries, or if the country cannot be determined, optional analytics stays off until you choose Accept optional measurement or enable Analytics in Privacy choices. We use a country-level response from our Firebase host to make this choice; our measurement code does not store an IP address or precise location. Its pseudonymous browser cookie has a fixed 30-day lifetime and is not renewed on each page view. While on, Analytics helps us understand aggregate page visits, broad service-category interest, booking steps, outbound social-profile clicks, confirmed paid bookings, campaign source, language, device type, and approximate geographic reporting. Google signals and ad personalization are disabled.

Our measurement code sends event-level booking steps, broad service categories, and a neutral offer code only for an explicitly approved promotion. It does not send your name, phone number, email address, consultation notes, allergies, skin concerns, exact appointment date or time, card information, payment token, exact service title, or raw booking response to Google Analytics or an advertising platform. A confirmed booking event reports a pseudonymous booking transaction identifier, the amount paid that day, currency, broad service information, and booking language.

Campaign Information and Local Storage

While Analytics is on, the website may retain allowlisted UTM campaign values for up to 30 days so a visit can be connected to a later booking. With advertising measurement enabled, allowlisted advertising click identifiers may also be retained for up to 30 days. They are removed when advertising measurement is turned off. Choose OK to acknowledge the notice without changing your settings. Choose Opt out in the banner to turn optional measurement off, or reopen Privacy choices at any time. Your choice is saved in browser storage, with session storage as a fallback when available. If neither store can save your choice, it remains active on the current page and we show a message. Turning Analytics off stops future analytics events and removes its measurement cookies and stored campaign information where the browser allows. Global Privacy Control keeps advertising measurement off.

Advertising Measurement

Advertising measurement starts automatically for new visitors identified as being in the United States or Puerto Rico, unless a saved privacy choice or Global Privacy Control keeps it off. In other countries, or when the region cannot be verified, it stays off until you explicitly enable it. Google Ads measures event inquiries only on event inquiry pages. We record a completed inquiry only after Formspree confirms acceptance; this does not prove email delivery or reserve a place. WhatsApp clicks are measured separately as contact intent, not received messages. No form names, phone numbers, email addresses or message contents are sent to Google. Global Privacy Control keeps advertising measurement off. While advertising measurement is on, Meta Pixel measures visits on neutral website pages, booking steps and confirmed payments. Meta can receive the page URL, referrer, browser/device information and measurement cookies. We block the pixel on sensitive or unsupported URL/referrer contexts and do not include customer fields, service identifiers, exact service names or consultation details in Meta event payloads. Payment values represent the amount paid that day, which may be a deposit rather than the full service price. Automatic advanced matching, automatic event detection, extra page/product data collection, Google signals, Google ad personalization and enhanced conversions remain disabled. Saved opt-outs remain off, including choices made under an earlier policy. Older opt-ins require a new choice when the measurement policy changes. Closing the U.S. notice with OK acknowledges the current defaults; it is not treated as consent for visitors who require an explicit choice.

How We Use and Share Information

• Create, manage, and support appointments.
• Process appointment deposits and prevent duplicate payments or bookings.
• Maintain app and website functionality, reliability, and security.
• While the corresponding measurement choice is on, understand aggregate service interest, booking completion, and advertising effectiveness.

Information may be shared with Firebase or Google Cloud for app and booking operations, Square for payment processing, and Google Analytics while Analytics is on. Emily SkinCare & Spa does not sell personal data.

Retention, Access, and Deletion

Booking, appointment, support, and payment-related records may be retained for business, legal, accounting, fraud-prevention, and support purposes. Google Analytics retention is controlled in the Analytics property and may differ from records held by the studio. You may contact support to request access, correction, or deletion of information held by Emily SkinCare & Spa. App account deletion requests may also be made through the Account Deletion page.

Children

The app and website are not intended for children under 13.