Privacy Policy

What we collect

Almost all of this site is just pages to read, and reading them asks nothing of you. We only collect information in three places.

• The contact form. Your name, email address, phone number and message, plus your pronouns and preferred method of contact if you choose to give them. We also record which page you sent the form from, so we know what you are asking about.
• Booking. Appointments are booked on GlossGenius, not here. When you tap a Book Now button you leave this site, and anything you enter there is held by GlossGenius under their own privacy policy.
• Analytics. Google Analytics 4 tells us which pages people visit and roughly where in the world they are. It is about pages, not people: we never see your name or email in analytics.

Cookies and analytics

This site sets no cookies of its own. Google Analytics 4 sets its own to tell one visit from another, and to work out whether you are a first-time or returning visitor. GA4 uses your IP address to estimate your country and city, then discards it: we never see your full IP address in our reports, and we have not enabled Google Signals, advertising features or any cross-site tracking.

If you would rather not be counted at all, Google publishes a browser add-on that opts you out of Analytics everywhere, and most browsers offer a tracking-protection or "do not track" setting that blocks it. Blocking analytics does not stop any part of this site working.

Who else sees your information

We use a small number of outside services to run the site. Each one only receives what it needs, and none of them are permitted to use your information for their own purposes.

• Resend delivers the contact form to our inbox and forwards mail sent to our website address. Your message passes through their systems.
• Google Analytics measures site traffic, as described above.
• Google Fonts and Google Maps load the site’s typefaces and the map on our contact and location pages. Both receive your IP address as a normal part of loading, which is how any file on the internet reaches your browser.
• GlossGenius runs our booking and takes payment. We never see or store your card details.
• Firebase App Hosting serves this website.

Why we collect it, and for how long

We use your contact details to answer you, and nothing else. We do not add you to a mailing list from the contact form, and we do not pass your details to anyone for marketing.

Messages stay in our email for as long as we may reasonably need them, which for a question about an appointment is usually a matter of months. Analytics data expires on Google’s own schedule. If you want your message deleted sooner, ask us and we will.

Our server keeps a visitor’s IP address in memory for fifteen minutes, purely to stop the contact form being used to send spam. It is never written to disk and never linked to a person.

Your rights

Wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email us and we will do it. We will not charge you and we will not treat you any differently for asking.

If you are in the UK or the European Economic Area, the GDPR gives you the rights below. Our legal basis for answering your message is legitimate interest, or the steps taken at your request before entering a contract. For analytics we rely on our legitimate interest in understanding which pages are useful: we do not ask for consent through a banner today, and you can stop analytics entirely using the browser settings described above. Tell us and we will delete anything we hold about you.

• Access. A copy of the personal data we hold about you.
• Rectification. Correction of anything wrong or incomplete.
• Erasure. Deletion of your data, where we have no overriding reason to keep it.
• Restriction and objection. Ask us to stop using your data, or object to a particular use.
• Portability. A copy in a machine-readable format.
• Complain. To your local data protection authority, if you think we have got it wrong.

If you live in California or Nevada

We do not sell personal information and we do not share it for cross-context behavioral advertising, as California and Nevada define those terms. California residents may still ask what we have collected, ask us to delete it, and ask us to correct it, and we will not discriminate against you for asking. Nevada residents may tell us not to sell their personal information, although we do not sell it in the first place.

Children

This site is not for children, and we do not knowingly collect anything from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.

Keeping it safe

The site is served over HTTPS, and the contact form is sent from our server rather than the browser so that nothing sensitive is exposed in the page. No website can promise perfect security, but we keep what we collect small on purpose, which is the best protection there is.

Changes to this policy

If we change how we handle your information we will update this page and move the date at the top. If the change is significant we will say so plainly rather than quietly editing it.

Contact us, or ask us to delete your data

Email hello@pinkcrabwaxbar.com or call (702) 530-6029, and say what you would like us to do. Tell us the email address or phone number you used so we can find your message. We answer during studio hours and will confirm once it is done.