Policies
Privacy policy.
What I collect when you book or visit, why, and who else sees it. In short: only what I need to care for your skin, never sold, and your photos stay with me.
Who I am
Slate Standard Esthetics (“Slate Standard”, “I”, “we”) is a licensed esthetician studio in Corona, California, run by Amber. This policy covers slatestandard.com, booking, visits, texts and email. Questions about it? Email amber@slatestandard.com.
What I collect
- When you book: your name, email, mobile number, what’s going on with your skin, the products you use now, your chosen time, and anything optional you add, like how you heard about me or a gift card code.
- Your consent form: your answers to health questions (for example pregnancy, implants, medications, allergies and recent treatments), your signature and when you signed.
- Payment: your card is saved and charged by Stripe. I never see or store your full card number. I keep a record of what you paid and how.
- Your visits: notes on your treatment, the products used, home-care advice, and before and after photos taken in the studio.
- Messages: emails, texts and contact-form notes you send me.
- The website: my host keeps standard server logs (IP address, browser, pages requested) for security. If you sign in to “Your visits”, a cookie keeps you signed in for up to 90 days. The shop, once open, uses cookies to hold your cart. I don’t use advertising or tracking cookies.
How I use it
- To plan and give you safe, personal treatment.
- To book, confirm, remind and reschedule your visits, and to send your consent form and aftercare.
- To take payment at your visit, and the late-cancel or missed-visit fee described in my policies.
- To answer your questions and check in after a visit.
- To send one “time for your next visit” email if you haven’t rebooked. Every one has an unsubscribe link.
- To keep the records a licensed esthetician should keep, and to protect the site from misuse.
I don’t send marketing texts, and I never sell your information.
Who else sees it
Only the services that help me run the studio, and only what each one needs:
- Stripe saves and charges your card.
- Twilio sends texts, only if you chose to get them.
- My email and calendar providers (Google Workspace and an email delivery service) deliver messages and keep my schedule. Video consults use Google Meet.
- My web host (HostGator) runs the site, and backups of it are stored privately.
I may also share information if the law requires it, or to protect someone’s safety. I never sell or rent your personal information, and I don’t share it for advertising. Your photos and health answers are never posted or shared without your written permission.
Text messages
Texts are optional and only go to clients who tick the box when booking. Mobile numbers and text opt-in consent are never sold or shared with third parties or affiliates for marketing or promotional purposes. Details, including how to stop texts, are in my text message terms.
How long I keep it
I keep client records, including consent forms and visit notes, while you’re a client and for as long as I need them for my records and legal obligations. You can ask me to delete your information at any time, and I’ll delete what I’m not required to keep.
How I protect it
The site uses encrypted connections (HTTPS). Photos, health answers and visit notes are stored privately and are never on a public page. Only the studio can see them, and you don’t see your photos online either. Card details stay with Stripe. No system is perfectly secure, so if something ever went wrong I would tell you promptly.
Your choices and rights
- Ask to see, correct or delete the information I have about you by emailing amber@slatestandard.com.
- Turn off texts by replying STOP. Turn off reminder emails with the unsubscribe link.
- California residents may ask what personal information I’ve shared with others for their direct marketing. The answer is none.
- Browsers’ “Do Not Track” signals: I don’t track you across other sites, so there is nothing to switch off.
I won’t treat you differently for asking.
Children
This site isn’t meant for children under 13, and I don’t knowingly collect their information.
Changes
If I change this policy I’ll update the date at the top.